This section provides additional details about your privacy rights subject to the General Data Protection Regulation (GDPR) and UK GDPR. 1. European Union residents You have a number of rights in respect to your personal data. These are:  The right to access your personal data, which includes receiving confirmation on whether the personal data are being processed and if so, receiving the personal data and related information about why they are being processed, the categories of personal data involved, to whom the personal data have been or will be shared and how long the data will be kept for. We will accede to any such valid requests within one month of the receipt of a valid request in writing  The right to request that we rectify inaccurate data or update incomplete data. You may also request that we restrict the processing of the personal data until the rectification or updating has been completed, although please be aware that we may have to suspend the operation of your account or the products or services that we provide.  The right to request that we erase your data under certain circumstances, including where you want to withdraw the consent you previously gave to us, where you object to Franchise Direct’s processing the data for its own legitimate interests or where Franchise Direct’s processing of the data is unlawful. In the case of unlawful processing, you can also request that this processing is restricted rather than the personal data being erased. Please be aware that we may have to suspend the operation of your account or the products or services that we provide where data processing is restricted.  The right to object to the processing of your personal data, where such processing is being conducted for the purpose of: Direct marketing; Establishing, exercising or defending ourselves or others from legal claims; or Our legitimate interests, unless we can demonstrate that our interests override your interests and rights. You may request that we restrict the processing of the personal data until this analysis of legitimate interests has been concluded, although please be aware that we may have to suspend the operation of your account or the products or services that we provide where data processing is restricted.  The right to receive your data in a portable format or, subject to it being technically feasible, have us transfer it directly to a third party. This applies where you have provided us with consent for the processing or where the processing is necessary for entering a contract with us.  The right, at any time, to withdraw consent you have provided to us to process your personal data.  The right to lodge a complaint to the relevant supervisory authority. If you wish to raise a complaint in relation to how we processed your personal data, please contact us at privacy@franchise direct.com. We take your privacy and data protection very seriously in Franchise Direct and we endeavour to address your complaint as expediently and as thoroughly as we can in order to find a satisfactory resolution for you. You may contact the Data Protection Commission (DPC), Ireland's supervisory authority for data protection matters. If you reside in another EEA Member State, you have the right to make a complaint about the way we process your personal data to the supervisory authority in the EEA Member State of your habitual residence, place of work or place of the alleged infringement. Information about your supervisory authority could be found here (external link). 2. UK residents Under the DPA 2018 and the UK GDPR, you are entitled to the following rights: Question any data about you that you think is incorrect and have us take reasonable steps to correct it for you; To be told about how we process your data; Require the erasure of personal data concerning you in certain situations; Access personal data and copies (free of charge, where reasonable for us to do so at the time) concerning you collected by us in the course of our relationship with you; Object at any time to processing of personal data concerning you for e.g., direct marketing; Object to decisions being taken by automated means which produce legal effects concerning you or which similarly may significantly affect you; Object in certain other situations to our continued processing of your personal data; Otherwise, restrict our processing of your personal data in certain circumstances; The right to move, copy or transfer your personal data (where reasonable and proportionate for us to do so).For further data on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individual rights under the GDPR. If you would like to exercise your rights, please contact us at privacy@franchise direct.com 3. The United States of America 3.1. CCPA & CPRA Privacy Statement for California Residents Franchise Direct has adopted this CCPA & CPRA Privacy Statement to comply with the California Consumer Privacy Act of 2018 (CCPA) and California Consumer Privacy Act of 2020 (CPRA). Any terms used in this Statement that are defined in the CCPA & CPRA have the same meaning given therein, and it applies solely to visitors and users of our website who reside in the State of California.  Information We Collect, Use and Share As stated above, in the twelve (12) months preceding the Effective Date on this Privacy Policy, we may have collected, used, or shared information about California consumers in each of the following categories described in section 2 of this Policy. The CCPA defines “sale” of information broadly and some of our personal information sharing may be considered a “sale” under this definition. Franchise Direct does not sell personal information of consumers for monetary consideration under CCPA or CPRA. The use of cookies and other website collection tools described in this policy may fall under the definition of “sale” of information under CCPA. This “sale” of information is not part of service and product offerings to our customers, but rather applies only to our marketing websites and our own use of cookies for website visitors. If you wish to opt out the sale of your information, please refer to the section “Right to Opt-out of Sale” below. How we use and share this information Franchise Direct will use the aforementioned personal data for the purposes detailed in section 3 of this Policy. Data subject Rights From January 1, 2023, California residents have the following rights: Right to Know. You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Right to Correct. You have the right to request that we amend any inaccurate personal information that we collected from you. Right to Delete. You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Right to Non-Discrimination. You have the right to not be discriminated against for exercising any of these rights as a consumer or employee. In this terms, Franchise Direct will not discriminate against you or any other individual for exercising any our your rights, and only to the extent permitted by the CCPA & CPRA, Franchise Direct will not 1) deny you goods or services, 2) charge you different prices or rates for goods or services 3) provide you a different level or quality of goods or services, or 4) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.  Right to Opt-Out of Sale and Sharing. You have the right to Opt-out any Sales, as defined by the CCPA & CPRA, of personal Information by Franchise Direct. You can exercise this right by contacting us. Please note that we do not sell the personal information of minors under 16 years of age under any circumstances, as our website is not intended for users under this age. To exercise one or more of the above CCPA & CPRA rights, please contact us by email at privacy@franchisedirect.com. We will need to verify your request and we may need you to provide additional information for this purpose. We will respond to all such request within forty-five (45) days, and in the case that we require more time to do so, we will inform you of the reasons and extension period.      3.2. VCDPA Privacy Statement Franchise Direct has adopted this VCDPA Privacy Statement to comply with Virginia Consumer Data Protection Act (VCDPA), which provides certain rights to Virginia consumers. Any terms used in this Statement that are defined in the VCDPA have the same meaning given therein, and it applies solely users and consumers from Virginia. To the extent that we collect Personal Data that is subject to the VCDPA, that information, our practices, and your rights are described below. Under the Virginia Consumer Data Protection Act (“VCDPA”), effective on January 1, 2023, a controller shall comply with an authenticated consumer request to exercise the right: ●  To confirm whether or not a controller is processing the consumer's personal data and to access such personal data; ●  To correct inaccuracies in the consumer's personal data, taking into account the nature of the personal data and the purposes of the processing of the consumer's personal data; ●  To delete personal data provided by or obtained about the consumer; ●  To obtain a copy of the consumer's personal data that the consumer previously provided to the controller in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and ●  To opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. Franchise Direct will not discriminate consumers exercising their rights, and you can Opt-Out of the sale of your personal information, targeted advertising and profiling. To exercise one or more of the above VCDPA rights, please contact us by email at privacy@franchise direct.com. We will need to verify your request and we may need you to provide additional information for this purpose. We will respond to all such request within forty-five (45) days, and in the case that we require more time to do so, we will inform you of the reasons and extension period. Under the VCDPA, you have the right to appeal a business´s refusal of a request through an appeal process, and we must respond to an appeal in writing within sixty days (60). If the appeal is denied, we must provide and online mechanism (if available) or other method through which you, as a consumer, can submit a complaint to the AG (Attorney General of Virginia).      3.3. CPA Privacy Statement Franchise Direct has adopted this Colorado Privacy Statement to comply with Colorado Privacy Act (he “CPA”) which provides certain rights to Colorado consumers. Any terms used in this Statement that are defined in the CPA have the same meaning given therein, and it applies solely users and consumers from Colorado.    Under the Colorado Privacy Act (the “CPA”), effective on July 1, 2023, a consumer has the following rights: Right to Access. Consumers have the right to confirm whether a controller is processing personal data concerning the consumer and to access the consumer’s personal data; Right to Correction. Consumers have the right to correct inaccuracies in the consumer’s personal data, taking into account the nature of the personal data and the purposes of the processing of the consumer’s personal data; Right to Delete. Consumers have the right to delete personal data concerning the consumer; Right to Data Portability. Consumers have the right to obtain a personal data in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another entity without hindrance; Right to Opt-out. Consumers have the right to opt out of the processing of personal data concerning the consumer for purposes of: targeted advertising; the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer. To exercise one or more of the above CPA rights, please contact us by email at privacy@franchise direct.com. We will need to verify your request and we may need you to provide additional information for this purpose. We will respond to all such request within forty-five (45) days, and in the case that we require more time to do so, we will inform you of the reasons and extension period. Under the CPA, you have the right to appeal a refusal of a request through an appeal process, and we must respond to an appeal in writing within sixty days (60). If the appeal is denied, we must provide and online mechanism (if available) or other method through which you, as a consumer, can submit a complaint to the AG (Attorney General of Colorado). 3.4. CTDPA Privacy Statement Franchise Direct has adopted this Connecticut Privacy Statement to comply with Connecticut Act Concerning Personal Data Privacy and Online Monitoring ('CTDPA') which provides certain rights to Connecticut consumers. Any terms used in this Statement that are defined in the CTDPA have the same meaning given therein, and it applies solely to users and consumers from Connecticut. To the extent that we collect Personal Data that is subject to the CTDPA, that information, our practices, and your rights are described below. Under the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (the “'CTDPA”), effective on July 1, 2023, a controller shall comply with an authenticated consumer request to exercise the right: Right to be Informed: Consumers have the right to confirm whether a controller is processing the consumer's personal data; Right to Access: Consumers have the right to confirm whether or not a controller is processing the consumer's personal data and accessing such personal data unless such confirmation or access would require the controller to reveal a trade secret; Right to Correction: Consumers have the right to correct inaccuracies in consumer’s personal data, taking into account the nature of the personal data and the purposes of the processing of consumer’s personal data; Right to Rectification: Consumers have the right to correct inaccuracies in their personal data, taking into account the nature of the personal data and the purposes of the processing of the consumer's personal data; Right to Erasure: Consumers have the right to delete personal data provided by, or obtained, about them; Right to object/opt-out: Consumers have the right to opt-out of the processing of their personal data for purposes of: targeted advertising; the sale of personal data; or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer. Right to Data Portability: Consumers have the right to obtain a copy of their personal data processed by the controller, in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another controller without hindrance, where the processing is carried out by automated means, provided such controller will not be required to reveal any trade secret; Right not to be subject to automated decision-making: Consumers have the right to opt of the processing of the personal data for purposes of profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer.To exercise one or more of the above CTDPA rights, please contact us by email at privacy@franchise direct.com. We will need to verify your request and we may need you to provide additional information for this purpose. We will respond to all such request within forty-five (45) days, and in the case that we require more time to do so, we will inform you of the reasons and extension period.  Under the CTDPA, you have the right to appeal a refusal of a request through an appeal process, and we must respond to an appeal in writing within sixty days (60). If the appeal is denied, we must provide and online mechanism (if available) or other method through which you, as a consumer, can submit a complaint to the AG (Connecticut Attorney General). 3.5. UCPA Privacy Statement Franchise Direct has adopted this Utah Privacy Statement to comply with Utah Consumer Privacy Act ('UCPA') which provides certain rights to Utah consumers. Any terms used in this Statement that are defined in the UCPA have the same meaning given therein, and it applies solely users and consumers from Utah. To the extent that we collect Personal Data that is subject to the UCPA, that information, our practices, and your rights are described below. Under the Utah Consumer Privacy Act ('UCPA'), which will become effective on December 31, 2023, a controller shall comply with an authenticated consumer request to exercise the following rights: Right to Access. Consumers have the right to (i) confirm whether a controller is processing the consumer’s personal data; and (ii) access the consumer’s personal data; Right to Delete. Consumers have the right to delete the consumer’s personal data that the consumer provided to the controller. Right to Data Portability. Consumers have the right to obtain a copy of the consumer’s personal data, that the consumer previously provided to the controller, in a format that: to the extent technically feasible, is portable; to the extent practicable, is readily usable; and allows the consumer to transmit the data to another controller without impediment, where the processing is carried out by automated means. Right to Opt-out of certain processing. Consumers have the right to opt out of the processing of the consumer’s personal data for the purposes of targeted advertising; or the sale of personal data. To exercise one or more of the above UCPA rights, please contact us by email at privacy@franchisedirect.com. We will need to verify your request and we may need you to provide additional information for this purpose. We will respond to all such request within forty-five (45) days, and in the case that we require more time to do so, we will inform you of the reasons and extension period.  4. Residents of other jurisdictions If you are not a resident in one of the above countries mentioned in this Statement, and you would like to exercise your data privacy rights or have any questions or concerns regarding your personal data and privacy, please reach out to us at privacy@franchisedirect.com