Data Subject Requests (DSAR)

1. Your Rights as a Data Subject

Depending on your geographical location (such as the UK, European Union, State of California, or Pakistan), you possess legal rights regarding the collection, processing, and retention of your Personal Data. HUK SONS IT honors these rights globally:

• Right to Access (Know): You can request confirmation that we process your data and receive a complete copy of all personal information we hold about you.
• Right to Rectification (Correction): You can request that we update or correct inaccurate or incomplete personal records.
• Right to Erasure (Deletion / "Right to be Forgotten"): You can request that we delete your personal data from our databases and notification lists, subject to valid legal retention exemptions (e.g. ongoing project contracts or tax audit compliance).
• Right to Data Portability: You can request that we transfer your personal data to you or another provider in a structured, commonly used, machine-readable format (e.g., CSV or JSON).
• Right to Restrict or Object: You can object to processing based on legitimate interests or request that we temporarily halt processing while we verify data accuracy.

2. Verification & Security Protocol

To protect our users and prevent malicious data harvest (social engineering), HUK SONS IT enforces a strict identity validation process:

1. Initial Verification: Any request must originate from the email address associated with the personal data (e.g., the address used to submit a quote or sign up for a newsletter).
2. Secondary Verification: For access or deletion requests, we will send a verification link to your email address containing a challenge request. For highly sensitive queries, we may require a telephone confirmation call or proof of billing.
3. Authorized Agents: If you are submitting on behalf of a consumer (allowable under CCPA/CPRA), you must submit a signed power of attorney or written, notarized authorization from the data subject.

Requests that cannot be verified after reasonable attempts will be rejected to ensure user confidentiality.

3. How to Submit a Request

To submit a formal request, please send an email to our Data Protection Officer at:

Email: privacy@huksonsit.com
Subject Line: [DSAR] Privacy Request - [Your Name]

In your email, please specify:

• Your Full Name and Company Name (if applicable).
• The specific right you wish to exercise (Access, Deletion, Correction, Portability).
• The context of your interaction with us (e.g., "submitted a quote request" or "newsletter subscriber").

4. Response Timelines and Escalations

We do not charge any fee for processing verifiable requests. We adhere to the following statutory response timelines:

If an extension is necessary, we will notify you in writing within the primary timeline, explaining the technical reason for the delay.