Data Rights
Effective Date: July 17, 2026
Last Updated: July 17, 2026
Introduction
Depending on where you live and the law that applies, you may have rights concerning your personal information.
This page explains the requests you may submit and how Emerald Arbor handles them.
Scope
This page applies to personal information handled by Emerald Arbor, LLC in connection with the products and services identified on our Covered Products & Services page.
Access and Right to Know
You may request access to personal information we maintain about you.
Depending on applicable law, you may also request information about:
- Categories of personal information collected
- Sources of the information
- Purposes for collection or use
- Categories of recipients
- Categories sold or shared, if any
- Retention criteria
- Specific pieces of personal information
Correction
You may request correction of inaccurate personal information.
We may request information reasonably needed to verify the correction.
Deletion
You may request deletion of personal information.
We may retain information when permitted or required for purposes such as completing a transaction, maintaining security, preventing fraud, honoring opt-outs, complying with law, resolving disputes, or exercising legal rights.
Portability
Where applicable, you may request a portable copy of personal information in a reasonably usable format.
Restriction and Objection
Where applicable, you may request restriction of processing or object to processing based on legitimate interests, direct marketing, or other grounds recognized by law.
Withdraw Consent
Where processing is based on consent, you may withdraw consent.
Withdrawal does not affect processing that was lawful before consent was withdrawn.
Sale, Sharing, and Targeted Advertising
Emerald Arbor does not sell personal information for money.
Depending on the technologies used and the law that applies, some disclosures for cross-context behavioral advertising or targeted advertising may be treated as sale or sharing.
Where such activity occurs and an opt-out right applies, the relevant website will provide an appropriate opt-out method, which may include a “Do Not Sell or Share My Personal Information” link, cookie controls, or recognition of an applicable opt-out preference signal.
You may also email privacy@emeraldarborllc.com. A suggested subject is:
Do Not Sell or Share My Personal Information
The suggested subject helps us route the request but is not required for a valid request.
Sensitive Personal Information
Where applicable, you may request to limit certain uses or disclosures of sensitive personal information beyond what is necessary to provide requested products and services.
Emerald Arbor does not use sensitive personal information to infer characteristics about individuals unless a specific product clearly explains that use and obtains any required permission.
Automated Decision-Making and Profiling
Where applicable, you may request information about or opt out of certain automated decision-making or profiling that produces legal or similarly significant effects.
Emerald Arbor does not intend to rely solely on automated processing to make decisions producing legal or similarly significant effects unless the applicable product provides additional notice and legally required rights.
Marketing Choices
You may unsubscribe from marketing email using the link provided in the message.
You may opt out of an applicable SMS program by replying STOP.
SMS consent records and opt-out procedures are explained in our SMS Terms & Consent.
Submitting a Request
Submit privacy requests to:
privacy@emeraldarborllc.com
Please identify the right you wish to exercise and provide enough information for us to locate relevant records.
Suggested subject lines may help us route a request, but you do not need to use exact wording for a valid request. We will treat a clear privacy request as a request even when it arrives through another reasonable contact channel.
Verification
We may take reasonable steps to verify your identity before completing a request.
Verification may depend on the nature of the request, the sensitivity of the information, and the risk of unauthorized disclosure or deletion.
We will not request more information than reasonably necessary for verification.
Authorized Agents
Where permitted, an authorized agent may submit a request for you.
We may require evidence of authorization and may contact you directly to verify your identity or confirm the request.
Response Timing
We respond within the period required by applicable law.
For example, GDPR and UK GDPR requests are generally answered within one month, subject to permitted extensions. California verifiable consumer requests are generally answered within 45 days, subject to permitted extensions.
Where permitted, we may extend a response period and will provide notice of the extension and reason.
The response period begins when the request is received through a reasonable contact channel, subject to any legally permitted verification process.
Appeals and Complaints
Where applicable, you may appeal a denied request by replying to the decision or emailing privacy@emeraldarborllc.com. A suggested subject is:
Privacy Request Appeal
The suggested subject is not required.
You may also have the right to complain to a privacy regulator, data-protection authority, attorney general, or other authority where you live.
Residents of the European Economic Area may complain to the supervisory authority in their country of residence, work, or the location of the alleged infringement. UK residents may complain to the UK Information Commissioner’s Office.
No Discrimination
We will not unlawfully discriminate against you for exercising an applicable privacy right.
A product may offer a lawful financial incentive or price difference only when it provides any notice and consent required by law.
Global Privacy Control
Where required and technically supported, we treat a recognized Global Privacy Control signal as an opt-out request for the browser or device sending the signal and for the activities to which the signal legally applies.
Limits and Exceptions
Privacy rights are not absolute.
A request may be limited or denied where permitted by law, including when we cannot verify identity, the request is manifestly unfounded or excessive, or an exception applies.
Changes to This Page
We may update this page to reflect changes in our products, services, legal obligations, or request procedures.
When appropriate, we will revise the Last Updated date shown at the beginning of this page.
Contact
Emerald Arbor, LLC
7901 4th St N #22704
St. Petersburg, FL 33702 USA
Privacy Questions and Data Rights Requests
privacy@emeraldarborllc.com