Your rights

Data Rights & Requests

Exercise your rights under GDPR, CCPA/CPRA, and other privacy regulations.

๐Ÿ”

Right to Access

Request a copy of all personal data we hold about you, including account metadata and consent records.

๐Ÿ—‘

Right to Deletion

Request permanent deletion of your account and all associated data, including encrypted document blobs.

๐Ÿ“ฆ

Right to Portability

Download your data in a machine-readable format, including your encrypted DPA documents and account information.

โšก

Right to Rectification

Request correction of inaccurate personal data. Note: encrypted DPA content can only be modified by you directly.

๐Ÿšซ

Right to Restrict Processing

Request that we limit how we use your data while a concern is being resolved.

๐Ÿ”“

Withdraw Consent

Withdraw your health data processing consent at any time. This will require account deletion as the Service cannot function without it.

Submit a Data Request

We will verify your identity before processing any request. For security, we may ask you to confirm your identity via the email address associated with your account.

Consent Management

Response Timeframes

RegulationStandard responseUrgent/breach
GDPR (EU/EEA)30 days72 hours
CCPA/CPRA (California)45 daysโ€”
FTC Health Breach Ruleโ€”60 days

Data Controller

Eitel, LLC
2232 Dell Range Blvd, #1726
Cheyenne, WY 82009
privacy@bloodless.org

Contact

For questions about your data rights or to make a request by email:

  • Email: privacy@bloodless.org
  • EU residents may also contact your local data protection authority