7.1 Rights Under GDPR (EU and UK Users)

If you are located in the EU or UK, you have the following rights under the GDPR and UK GDPR respectively. These rights are not absolute and are subject to certain conditions and exceptions:

• Right of access (Article 15): request a copy of the personal data we hold about you, together with information about how and why we process it.

• Right to rectification (Article 16): request correction of inaccurate or incomplete personal data.

• Right to erasure (Article 17): request deletion of your personal data where there is no longer a lawful basis to retain it, subject to our legal retention obligations.

• Right to restrict processing (Article 18): request that we suspend or limit processing of your data in certain circumstances.

• Right to data portability (Article 20): where processing is based on consent or contract and carried out by automated means, request your data in a structured, machine-readable format.

• Right to object (Article 21): object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.

• Rights related to automated decision-making (Article 22): we do not use automated decision-making or profiling.

To exercise any of these rights, submit a written request to contact@paradoxcrisisprotocols.com. We will respond within one calendar month and will notify you within that period if an extension of up to two further months is required. We do not charge a fee for reasonable requests. You also have the right to lodge a complaint with your national data protection supervisory authority (see end of this Policy).

7.2 Rights Under US Law (US Residents)

Depending on your state of residence, you may have rights under applicable US privacy law, including the California Consumer Privacy Act (CCPA / CPRA) and equivalent state statutes. These may include: the right to know what personal information we hold; the right to delete it; the right to correct inaccurate information; the right to opt out of the sale or sharing of personal information (we do not sell or share personal information for behavioural advertising); and the right not to be discriminated against for exercising your rights. To make a request, contact contact@paradoxcrisisprotocols.com with your name, state of residence, and a description of your request.

7.3 Rights Under Australian Law (Australian Residents)

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to access and request correction of the personal information we hold about you. Contact contact@paradoxcrisisprotocols.com to make a request. We will respond within 30 days. You also have the right to complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

7.4 Rights Under Canadian Law (Canadian Residents)

Under PIPEDA and applicable provincial legislation, you have the right to access and request correction of personal information we hold about you. Contact contact@paradoxcrisisprotocols.com to make a request. You also have the right to complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.