Protection of Personal Information — Your Rights by Country

Everyone, everywhere

Whatever country you are in, you can ask us at support@rpmcode.com what personal information we hold about you, ask for a copy, ask us to correct or delete it, and complain to us. The sections below add what particular laws give you. Where a law gives you more than this page says, the law applies.

If your information is in RPM because a business you deal with put it there, that business is responsible for it: ask them first. We will help them answer you.

South Africa

Under the Protection of Personal Information Act 4 of 2013 (POPIA) you have the right to be told your information is being collected; to access it (section 23); to ask for it to be corrected or deleted (section 24); to object to its processing on reasonable grounds and to direct marketing (section 11(3)); not to be subject to decisions based solely on automated processing (section 71); and not to receive unsolicited electronic marketing without consent (section 69).

Our Information Officer: Provided on request (support@rpmcode.com). You can complain to the Information Regulator. Access to records is also governed by PAIA: see Access to Information Manual (PAIA).

Australia

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you can ask to access (APP 12) and correct (APP 13) your information, and may deal with us anonymously or under a pseudonym where that is practicable — it is not for an account. We handle your information under the APPs whether or not the small business exemption would apply to us.

Where a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme. If you are unhappy with our answer to a complaint, contact the OAIC.

New Zealand

Under the Privacy Act 2020 you can ask to access and correct your information, and we will notify you and the Privacy Commissioner of a privacy breach that has caused or is likely to cause serious harm. You can complain to the Office of the Privacy Commissioner.

European Union, EEA and Switzerland

Under the General Data Protection Regulation (GDPR) you have the right of access (Article 15), rectification (16), erasure (17), restriction (18), data portability (20), to object (21), not to be subject to solely automated decisions with legal or similar effects (22), and to withdraw consent at any time. Our legal bases are set out in the Privacy Statement. Transfers out of the EEA are protected as Data Processing Terms describes.

You can complain to the data protection authority where you live or work. In Switzerland, the revised Federal Act on Data Protection (FADP) gives similar rights, and the regulator is the Federal Data Protection and Information Commissioner (FDPIC).

Where the GDPR requires us to appoint a representative in the EU, they are named in Company Details and Legal Notice.

United Kingdom

Under the UK GDPR and the Data Protection Act 2018 you have the same rights as under the EU GDPR above. Where we must appoint a UK representative, they are named in Company Details and Legal Notice. You can complain to the Information Commissioner's Office.

United States

State privacy laws — including California's Consumer Privacy Act as amended by the CPRA, and the laws of Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states — give residents rights to know what personal information is collected and how it is used, to access, correct and delete it, to opt out of its sale, sharing for targeted advertising or profiling, and not to be discriminated against for using these rights. Where a law gives you a right to appeal our decision, write to support@rpmcode.com with "Appeal" in the subject.

We do not sell personal information or share it for cross-context behavioural advertising, and have not done so in the past twelve months. We treat a Global Privacy Control signal as a request to opt out, though there is nothing to opt out of. We do not use sensitive personal information to infer characteristics about you. The categories we collect, their sources, purposes and recipients are in the Privacy Statement; retention is in Data Retention, Backup and Deletion.

RPM is not directed at children under 13, and we do not knowingly collect their information (COPPA).

Canada

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), and Quebec's Law 25 where it applies, you can access and correct your information and withdraw consent. You can complain to the Office of the Privacy Commissioner of Canada, or the Commission d'accès à l'information in Quebec.

Brazil

Under the Lei Geral de Proteção de Dados (LGPD), Article 18, you can confirm whether we process your data, access, correct, anonymise, block or delete it, port it, learn who we share it with, and withdraw consent. You can complain to the Autoridade Nacional de Proteção de Dados (ANPD).

India

Under the Digital Personal Data Protection Act 2023 you can obtain a summary of your data and its processing, correct, complete, update or erase it, nominate someone to exercise your rights, and use our grievance process at support@rpmcode.com, before approaching the Data Protection Board of India.

Singapore, Japan, South Korea and elsewhere in Asia

Singapore's Personal Data Protection Act 2012 lets you access and correct your data and withdraw consent (regulator: the Personal Data Protection Commission). Japan's Act on the Protection of Personal Information gives rights of disclosure, correction and cessation of use (regulator: the Personal Information Protection Commission). South Korea's Personal Information Protection Act gives rights of access, correction, deletion and suspension (regulator: the Personal Information Protection Commission).

Africa and the Middle East

Nigeria's Data Protection Act 2023 (regulator: the Nigeria Data Protection Commission), Kenya's Data Protection Act 2019 (the Office of the Data Protection Commissioner), the UAE's Federal Decree-Law No. 45 of 2021, and Saudi Arabia's Personal Data Protection Law (the Saudi Data and AI Authority) each give rights to be informed, to access, correct and delete your data, and to object. Write to support@rpmcode.com to exercise them.