Your Privacy Rights
GDPR and CCPA/CPRA rights, how to exercise them, and the response clocks we run on.
- Effective June 23, 2026
- v1.1
- Thorbis, Inc., a Delaware corporation
01
Scope
This page supplements the Privacy Policy. For your end customers and employees, the business using Thorbis is the controller and Thorbis the processor; for account holders and site visitors, Thorbis is the controller.
02
We do not sell or share
Thorbis does not sell personal information and does not share personal information for cross-context behavioral advertising.
03
GDPR and UK GDPR rights
Residents of the EEA, UK, and Switzerland can access, rectify, erase, restrict, port, object, withdraw consent, and lodge complaints. Legal bases include contract performance, legitimate interests, consent, and legal compliance.
04
California rights
California residents can know, access, delete, and correct; opt out of sales and sharing (not applicable here); limit sensitive-data use; and never face discrimination for exercising any of it.
05
Submitting a request
Email privacy@thorbis.com. Identity is verified reasonably, and responses run on the statutory clocks: 45 days under CCPA/CPRA, one month under GDPR, with extension and appeal paths.
06
Authorized agents
Agents may submit requests with proof of authorization; individual verification may still be required.
This summary is provided for transparency and is not legal advice. Your use of Thorbis is governed by the agreement you accept. Questions: legal@thorbis.com · Thorbis, Inc., a Delaware corporation, Pickens County, Georgia, United States. The mailing address is available by request.