GDPR Rights Center

Your available rights

Depending on where you live and how Canadian Brand Forge processes your information, you may be able to request access, rectification, erasure, restriction, objection, data portability, withdrawal of consent, or marketing opt-out. Some rights are not absolute, especially where data is needed for fraud prevention, security, accounting, disputes, or legal obligations.

• Access: ask what personal data is held about you.
• Correction: fix inaccurate or incomplete data.
• Erasure: request deletion or anonymization where retention is not required.
• Restriction: ask for limited processing while a request is reviewed.
• Portability: request a machine-readable copy of eligible data.
• Objection or opt-out: object to certain processing or stop marketing communications.

Fastest option for customers

If you can log in, the customer dashboard is the fastest way to download data, manage cookie and communication preferences, review consent records, revoke trusted devices, and request correction, restriction, or deletion.

Identity checks and response time

For privacy and security, Canadian Brand Forge may ask for information that helps confirm the account or order before taking action. Data-rights requests should be handled without undue delay and generally within one month where GDPR applies, unless the request is complex or additional verification is needed.

Data connected to orders

Order data can include account details, selected service, package quantity, destination URL, payment state, wallet activity, invoice record, support messages, delivery state, and operational fulfillment references.

A rights request can cover this information, but some records may need to be retained for tax, accounting, dispute, fraud prevention, security, or legal reasons. Where full deletion is not available, minimized retention or anonymization may be used.

How to make a clear request

A clear request should include the account email, order number if relevant, request type, and the specific information or action requested. Do not include social media passwords, payment card numbers, or private platform messages.

If the request concerns a public URL, include the public URL and explain whether the issue relates to access, correction, erasure, restriction, portability, consent, or marketing opt-out.

Verification before action

Canadian Brand Forge may need to verify that the requester controls the account or email address before releasing data, changing account details, deleting profile information, or restricting processing.

Verification protects customer accounts, wallet balances, invoices, support history, and order records from unauthorized requests. A request may be delayed or denied if identity cannot be confirmed.

When deletion may be limited

Deletion may be limited where records are needed for active orders, payment disputes, tax records, accounting, fraud prevention, security review, legal claims, chargeback handling, or compliance duties.

In those cases, Canadian Brand Forge can restrict active use of the information, remove profile-level details where possible, and keep only the minimum record required for the stated purpose.

Consent and opt-out requests

Consent can apply to optional cookies, marketing communications, trusted-device choices, and certain preference settings. A customer can change many choices from the dashboard or cookie settings panel.

Withdrawing consent does not cancel an order, remove required transaction records, or stop messages needed for security, payment, support, or service delivery.

Response records

Canadian Brand Forge may keep a record of privacy requests, identity checks, response dates, administrator notes, and final decisions so the business can show how the request was handled.

Those records should be limited to what is needed for privacy compliance, audit history, dispute handling, and security review.

Dashboard privacy tools

Logged-in customers can use dashboard tools for data export, consent review, communication preferences, trusted devices, and account deletion or restriction requests where those features are available.

The dashboard is usually faster than the public form because the customer is already signed in and the request can be tied to the correct account record.

Orders in active delivery

A privacy request does not automatically cancel an active order. If the request affects a destination URL, order record, or account used for delivery, Canadian Brand Forge may need to finish, cancel, or review the order before changing related data.

Customers should open a support ticket for order cancellation or refund questions and use the GDPR form for privacy rights questions.

Marketing opt-out handling

Marketing opt-out requests stop optional promotional messages where the request can be matched to the email address. They do not stop required account, security, order, payment, wallet, legal, or support messages.

If a customer uses several email addresses, each address may need its own opt-out request unless the dashboard preference covers the account.

Portability format

Data portability usually means a machine-readable export of eligible account, order, wallet, support, consent, and request records. It does not require Canadian Brand Forge to provide internal security logic, supplier credentials, admin-only notes, or data that belongs to another person.

If the export cannot include a field for security or legal reasons, the response may explain the reason at a general level.

Restriction during review

A restriction request may limit certain uses of personal data while a correction, objection, deletion, or dispute request is reviewed. Restriction does not always mean the account, orders, or records are immediately removed.

Canadian Brand Forge may still process information needed for security, fraud prevention, active orders, payment records, legal duties, or communication about the request itself.

Supervisory authority rights

Where GDPR applies, a customer may have the right to complain to a supervisory authority if they believe a privacy request was not handled properly.

Before escalating, include enough information for Canadian Brand Forge to identify the account, review the request, verify identity, and explain the response. Clear details help resolve many requests without further steps.

Requests from visitors and non-customers

A person who never created an account may still file a data-rights request if they believe Canadian Brand Forge processed their information through a contact form, cookie choice, support message, security log, newsletter form, or other website interaction.

Visitor requests can be harder to verify because there may be no customer dashboard record. The requester should provide the email address used, approximate date, page or form involved, request type, and enough context to locate the record without exposing private information.

If Canadian Brand Forge cannot match the request to a record, the response may explain that no matching data was found or ask for more information needed to identify the relevant record safely.

The request should stay focused on personal data, not order support, refunds, or package delivery.