Data Rights Request Instructions

Data Rights Request Instructions Effective date: June 7, 2026 How to exercise privacy rights with 268BUGGIES / FleetMate Booking 1. Who Can Submit a Request - You, about your own personal information - A parent or guardian, about a minor's information where permitted by law - An authorized agent, with documentation of authority where required by law 2. How to Contact Us Email (preferred): privacy@268buggies.com Phone: +1-268-725-2669 Mail: 268 Buggies Ltd, Jennings, Antigua and Barbuda Subject line examples: - "Privacy Access Request" - "Privacy Deletion Request" - "Privacy Correction Request" - "Do Not Sell or Share Request" Online options on our booking site: - Do Not Sell or Share page (?page=do-not-sell) - Cookie Preferences (?page=cookie-notice) 3. What to Include - Full name - Email address and/or phone number used with your booking - Reservation number (if available) - Type of request (access, delete, correct, opt out, limit sensitive PI, cookie/analytics opt out) - Country/state of residence (helps us apply the correct law) - For agents: written authorization signed by the consumer 4. Verification To protect your data, we verify identity using information matching our records (e.g., recent booking email, phone, date of tour). We may request additional verification for deletion or sensitive access requests. 5. Response Times - California (CCPA/CPRA): within 45 days (up to 90 days with notice for complex requests) - GDPR/UK GDPR: within one month (up to three months with notice for complex requests) - Other laws: as required by applicable law 6. What You May Receive - Confirmation we received your request - A copy of personal information we maintain about you (access/portability) - Confirmation of correction, deletion, or opt-out where applicable - An explanation if we must deny part of a request due to legal exceptions 7. When We May Deny or Limit Requests We may decline or limit requests when: - We cannot verify your identity - The information is needed to complete a transaction or provide a service you requested - Deletion would interfere with legal obligations (tax, accounting, litigation) - Information must be retained for safety, fraud prevention, or security - The request is excessive, repetitive, or unfounded If denied, we explain the reason and your options to appeal where applicable. 8. Do Not Sell or Share / Analytics Opt-Out You may opt out without creating a booking: - Use the Do Not Sell or Share page on our FleetMate booking site - Enable Global Privacy Control (GPC) in a supported browser - Email privacy@268buggies.com with "Do Not Sell or Share" 9. Complaints (GDPR/UK) You may lodge a complaint with your local supervisory authority. We encourage you to contact us first so we can try to resolve your concern. Contact: privacy@268buggies.com