Your Privacy Rights

Last Updated: October 11, 2026

---

1. Rights Available to All Users

Regardless of where you are located, you have the following rights regarding your data held by Tiger Echo:

2. GDPR Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR, Regulation 2016/679):

Right	Description	Response Time
Right to Restrict Processing	Request temporary restriction of processing while a dispute is investigated	30 days
Right to Withdraw Consent	Withdraw consent at any time where processing is based on consent (e.g., optional email marketing)	Immediate
Right to Lodge a Complaint	File a complaint with your national Data Protection Authority (DPA)	Contact your local DPA
Right to Automated Decision-Making	Not be subject to solely automated decisions that produce significant effects; request human review	30 days
Right to Object to Legitimate Interests	Object to processing based on our legitimate interests; we will cease unless we have compelling grounds	30 days

3. UK GDPR Rights (UK Users)

For users in the United Kingdom, your rights are protected under UK GDPR and the Data Protection Act 2018. You have all the same rights as EU GDPR users, plus the right to:

• Contact the Information Commissioner's Office (ICO) at ico.org.uk if you are not satisfied with our response
• Request that we designate a representative in the UK (contact us to arrange)

4. CCPA Rights (California, USA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know — Request disclosure of what personal data we collect, use, and share (see full categories in our Privacy Policy)
• Right to Delete — Request deletion of your personal information
• Right to Opt-Out — Opt out of the sale or sharing of personal information. We do not sell or share your personal data.
• Global Privacy Control (GPC) — We honor the GPC browser signal. If your browser sends a GPC signal, we treat it as a valid opt-out request for any sale or sharing of personal information.
• Right to Non-Discrimination — Exercising your CCPA rights will not result in different service levels or pricing
• Authorized Agent — You may designate an authorized agent to make requests on your behalf (written permission required)

Categories of personal information collected (last 12 months): Identifiers (email, store domain), commercial information (subscription status, usage records), and internet activity (API access logs). We do not sell any of this information.

5. Canadian Users (PIPEDA)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA):

• You have the right to access, correct, and withdraw consent for your personal data
• Complaints may be filed with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca

6. Australian Users (Privacy Act 1988)

Under the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs):

• You may request access to and correction of your personal information
• You may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

6.1 Brazil — LGPD Rights

If you are in Brazil, you are protected under the Lei Geral de Proteção de Dados (LGPD, Law No. 13.709/2018), which grants rights equivalent to the GDPR (access, correction, deletion, portability, and objection), plus the right to revoke consent. You may contact the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

6.2 Middle East Rights (UAE, Saudi Arabia, Egypt)

We comply with regional data protection laws, including the UAE Federal Decree-Law No. (45) of 2021 (PDPL) and its DIFC/ADGM free-zone regimes; the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL, Royal Decree M/19); and the Egyptian Personal Data Protection Law No. 151 of 2020. Residents may exercise access, correction, deletion, and portability rights by contacting us, and may reach their authorities: UAE u.ae / DIFC Commissioner, Saudi SDAIA (sdaia.gov.sa), and the Egyptian Data Protection Center.

6.3 Hong Kong — PDPO Rights

Residents of Hong Kong are protected under the Personal Data (Privacy) Ordinance (PDPO) and may exercise access, correction, and erasure rights. You may contact the Office of the Privacy Commissioner for Personal Data (PCPD) at pcpd.org.hk.

6.4 Switzerland — FADP Rights

Residents of Switzerland are protected under the revised Federal Act on Data Protection (FADP, SR 235.1) and may exercise rights equivalent to the GDPR. You may contact the Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.

7. How We Respond to Rights Requests

• All requests should be sent to hanhui30081986@163.com with a clear subject line indicating the type of request (e.g., "GDPR Data Access Request")
• We will verify your identity before processing any request (typically by matching your registered email)
• We aim to respond within 30 calendar days
• For complex requests, we may extend the response period by an additional 30 days with a written explanation
• All requests are provided free of charge. We may charge a reasonable fee only if your request is manifestly unfounded or excessive (e.g., repetitive)

8. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify affected users within 72 hours of becoming aware of the breach
• Describe the nature of the breach and the data affected
• Provide steps you can take to protect yourself
• Report the breach to the relevant supervisory authority as required by law

9. Contact Us

For the complete picture of how we handle your data, please also review our Privacy Policy and Cookie Policy.