Your privacy rights.
One form.

Who this form is for

• Merchants: people who have a Verdikx account. For this data Verdikx is the controller (a “business” under California law). Please send the request from the email address on your account; it makes verifying you simpler.
• Shoppers: people who bought from a store that uses Verdikx. Verdikx processes shoppers’ data on behalf of that store, so the merchant is the controller (the “business”) and decides how your data is used. We pass your request to the merchant and help them respond. Include the store’s web address so we can find it. You can also contact the store directly; for Shopify stores, Shopify forwards customer data and deletion requests to us automatically.
• Anyone else, such as a website visitor, a job applicant or an authorized agent acting for someone. If you are an agent, say so in the details; we will ask for proof of your authority and may verify the person you act for directly.

Send a request

We keep what you send here, with a keyed one-way hash of your IP address used only to spot abuse of the form, for 24 months as the record of your request and our response, and use it only to handle the request. A copy goes to our privacy inbox, and a confirmation goes to you. See Privacy requests in the Privacy Policy.

How long it takes

These are the same commitments as in our Privacy Policy.

• We confirm receipt of every request within 10 business days. Requests sent through our online form are confirmed on screen straight away, and by email.
• We aim to answer every request within 30 days.
• Under California law (the CCPA, as amended by the CPRA) and similar US state laws, we answer within 45 calendar days of receipt. If we reasonably need more time, we may extend this once by up to 45 more days, and we will tell you why before the first 45 days end.
• Under the GDPR and the UK GDPR, we answer within one month of receipt. For complex or numerous requests we may extend this by up to two more months, and we will tell you why before the first month ends.
• Requests to opt out of the sale or sharing of personal information, or to limit the use of sensitive personal information, are acted on as soon as feasible and within 15 business days.
• For a shopper’s request, the merchant responds as the controller; we pass the request on and help them meet these timelines.

Verifying your identity

We verify your identity only for requests to know or access, delete or correct personal information. Requests to opt out of sale or sharing, or to limit the use of sensitive personal information, do not need verification; we may decline one only if we have a good-faith, documented reason to believe it is fraudulent.

For a request to access, delete or correct personal data, verifying usually means replying from the email address we hold for you or confirming details we already have. We only ask for what we need to verify you, and use it only for that. Verdikx does not sell personal information or share it for cross-context behavioral advertising, as the Privacy Policy explains.

Other ways to make a request

• Email privacy@verdikx.com with the same information.
• Merchants can delete their account and its data themselves in Settings → Delete account (a Shopify store must be uninstalled first). There is no self-service data export yet; ask for a copy with this form or by email. See Data export and deletion requests.
• See Your privacy choices for the choices you can make about your data. California residents can read more on the California privacy notice.