Request or Delete My Data
You have rights over your data. Here’s how to exercise them. Our full data practices are in our Privacy Policy .
Effective Date: June 1, 2026
Your Rights at a Glance
- Access — Get a copy of the personal information we hold about you
- Correction — Ask us to fix anything inaccurate or incomplete
- Deletion — Ask us to delete your information
- Restriction — Limit how we process your data in certain situations
- Portability — Receive your data in a structured format (CSV or JSON)
- Objection — Object to processing based on legitimate interests
- Appeal — Challenge our decision if we deny a request
What We Might Have
Depending on how you’ve interacted with us, we may hold:
- Your name and email address (from emails or forms)
- A record of our communications
- A resume or cover letter (if you submitted one for review)
- Your Discord username (if you’re in our community)
- Volunteer or event registration details (through NeonOne)
- Your mailing address and phone number (if you provided them for your NeonOne account — optional)
- Your shipping address (if you ordered from our merch store via Fourthwall)
We do not collect payment information, precise location, or sensitive personal information.
How to Submit a Request
Email contact@studygrc.org with the matching subject line:
| Request type | Subject line |
|---|---|
| Access | “Data Access Request” |
| Portability | “Data Portability Request” |
| Deletion | “Deletion Request” |
| Correction | “Rectification Request” |
| Restriction | “Processing Restriction Request” |
| Objection | “Processing Objection” |
| Appeal | “Data Request Appeal” |
Include:
- Your name
- The email address you used with us
- A short description of what you want and how you’ve interacted with Study GRC
- For corrections: the exact change you want made
- For deletions: which information and where it appeared
Response times: Within one month under GDPR; 45 days under CCPA. Complex requests may take up to two additional months — we’ll let you know.
What We Can’t Always Delete
Some things must stay by law or for technical reasons:
- Records we’re legally required to keep
- Information already anonymized (it’s no longer linked to you)
- Public posts that others have shared or archived (we can remove your name from our own records)
- Donation records — kept 7 years for IRS compliance
Verifying It’s You
Before we hand over or delete anything, we may ask you to confirm details (like the email address you used or when we last spoke) to make sure we’re not sharing or erasing someone else’s information. If absolutely necessary, we may ask for a government-issued ID — and we’ll delete it right after verifying.
Fees
Requests are free. For requests that are clearly unfounded or excessive (especially repeats), we may charge a reasonable fee or decline — and we’ll tell you first. We will never punish you for exercising your rights.
You can lodge a complaint directly with your local data protection authority at any time — you don’t need to go through us first.
Appeals and Complaints
If we deny your request and you want to appeal: email contact@studygrc.org with “Data Request Appeal” in the subject line within 30 days. A board member not involved in the original decision will review and respond within 14 days. That decision is final. This process is separate from our Code of Conduct appeals process .
You can also file directly with:
- EU/EEA residents: Your local supervisory authority (GDPR Article 77)
- California residents: California Privacy Protection Agency
Questions
Read our Privacy Policy or email contact@studygrc.org .