PRIVACY RIGHTS & REQUESTS
Data Rights & Privacy Requests
The verification, access, correction, deletion, portability, authorized-agent, consent-withdrawal, and appeal process used when those rights apply.
Status: Current governance standard for applicable RTH public operations. Product-specific controls apply when the relevant product or program is enabled.
1. Request types
Depending on the data and law that applies, RTH may support requests to confirm processing, access information, obtain a portable copy, correct inaccuracies, delete information, withdraw consent, opt out of legally defined sale/sharing/targeted advertising, restrict certain processing, or appeal a denied request.
2. How to submit
Send a request to privacy@restartingtheheart.com or use another verified privacy-request interface RTH provides. Describe the account, form, transaction, or product involved without sending unnecessary sensitive data by ordinary email.
3. Identity verification
RTH will use verification proportionate to the sensitivity of the request and data. RTH may ask for information reasonably necessary to match a requester to a record. RTH will not request a government identifier merely because a privacy request was submitted when a less intrusive method is sufficient.
4. Authorized agents and guardians
Where applicable law permits an authorized agent, guardian, parent, personal representative, or other authorized person to act for a user, RTH may verify both the representative's authority and the identity of the person whose data is involved.
5. Timing
RTH will respond within the period required by the law applicable to the request. If an extension is permitted and reasonably necessary, RTH will provide the notice required by that law.
6. Appeals
If applicable law gives a requester the right to appeal a denied privacy request, the response will explain how to submit the appeal. Appeals should be reviewed by someone not solely relying on the original denial rationale where practical.
7. Deletion limitations
A deletion request may not erase information RTH is legally required to preserve, information subject to a valid legal hold, fraud/security evidence, records needed to complete a transaction or exercise/defend legal claims, or properly de-identified information that can no longer reasonably be linked to the requester. Backup copies may remain until ordinary backup expiration if they are isolated from routine use.
8. Model-training requests
Because RTH separates product use from model training, model-development datasets must have their own provenance and consent/basis records. If personal data has been approved for model-development use and a person later exercises a valid withdrawal or deletion right, RTH will remove the data from future training/evaluation datasets where required and evaluate whether additional technical or model-level remediation is legally and technically necessary. RTH will not promise "machine unlearning" when a specific technique has not been validated.
9. Non-discrimination
RTH will not unlawfully discriminate against a person for exercising a privacy right. A feature may be unavailable when the requested deletion or permission withdrawal removes data that is technically necessary to provide that specific feature.
Privacy and data requests: privacy@restartingtheheart.com. Do not send medical records, passwords, authentication codes, government identifiers, or other unnecessary sensitive information by ordinary email.
General questions may use the RTH contact page.