Depending on your jurisdiction and applicable data protection laws, you may have certain rights regarding the personal data we hold about you. NISETA is committed to respecting and facilitating your rights as a data subject. These rights may include:

• Right to Access: You have the right to request confirmation of whether we are processing your personal data, and if so, to request a copy of the personal data we hold about you. This allows you to know and obtain a copy of the information we have collected about you in a portable format, as well as to check that we are processing it lawfully.

• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. If any of your information is out-of-date or incorrect, please let us know and we will update it.

• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances (the “right to be forgotten”). We will delete your personal information upon your request if (for example) it is no longer necessary for us to retain it for the purposes for which it was collected, or if you withdraw consent and no other legal basis for processing applies. Please note that we may need to retain certain information if required by law or for legitimate business purposes (we will inform you if so).

• Right to Restrict Processing: You have the right to ask us to suspend or limit the processing of your personal data in certain scenarios– for instance, if you contest the accuracy of the data or have objected to our processing (pending verification of our grounds for processing), or if our processing is unlawful but you prefer restriction over deletion. While processing is restricted, we can still store your information but will not use it for any other purpose except as allowed by you or by law.

• Right to Object: You have the right to object to our processing of your personal data where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you believe your rights outweigh our legitimate interest. You also have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. If you object to direct marketing, we will stop processing your personal data for those purposes.

• Right to Data Portability: Where applicable, you have the right to request that we provide you (or a third party you designate) with certain personal data that you have provided to us, in a structured, commonly used, and machine-readable format. This right only applies to personal data we process by automated means, and only where our processing is based on your consent or the performance of a contract with you. We will transfer that data to you or the third party upon your request, when technically feasible.

• Right to Withdraw Consent: In cases where we rely on your consent to process personal data (for example, for sending marketing emails or certain cookie uses), you have the right to withdraw your consent at any time. You can do this by contacting us or, in the case of email marketing, by clicking the “unsubscribe” link in our emails. Please note that withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal. If you withdraw your consent, we will stop the specific processing that was based on consent.

• Right to Opt Out of “Sale” or Sharing of Personal Data: Some privacy laws (such as the California Consumer Privacy Act, CCPA, as amended by CPRA) give you the right to direct a business that sells or shares personal information to stop doing so. NISETA does not sell your personal data to third parties for monetary consideration. We also do not share personal data with third parties for their own advertising or similar purposes. If any future service we use could be interpreted as a “sale” or “sharing” under applicable law (for example, certain types of targeted advertising), we will provide a mechanism for you to opt out. We also honor any applicable browser or device signals that communicate a consumer’s choice to opt out of the sale of personal data, as required by law.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of the rights described above. In other words, we will not deny you goods or services, charge you different prices, or provide a different level of quality of service just because you exercised your privacy rights. The only circumstances in which we might charge a different price or provide a different service related to your data rights is if the data you consent to share is necessary for a feature’s functionality (in which case we will inform you of the difference and offer you the choice).

Exercising Your Rights: To exercise any of your applicable privacy rights, please contact us at support@niseta.com with your request. Include sufficient information that allows us to verify you (such as the email address associated with your data, and a description of your request). We may need to verify your identity before fulfilling certain requests, to ensure that we do not disclose data to an unauthorized person. Verification may involve asking you to provide information that matches our records or supplying identification. We will respond to your request within the timeframe required by law for the applicable jurisdiction (for example, within 30 days for most requests under GDPR, which may be extended by an additional 60 days if necessary, or within 45 days under CCPA/CPRA, etc.). If we cannot fulfill your request, either wholly or in part, we will provide an explanation subject to any legal restrictions.

Marketing Communications: If you no longer wish to receive marketing or promotional communications from us, you may opt out at any time. The easiest way to opt out is by clicking the “unsubscribe” link in any marketing email you receive from us. You can also request to be removed from our mailing lists by contacting us at support@niseta.com and providing your name and email address along with your request. Please note that even if you opt out of marketing emails, we may still send you non-promotional communications as needed (for example, emails about a transaction you requested, customer service responses, or updates to this Privacy Policy).

Cookies and Tracking Opt-Out: As described in the Cookies and Tracking Technologies section above, you have options to control or limit how cookies and similar technologies are used on our Site. You can adjust your web browser settings to remove or reject cookies, and you can use browser add-ons (such as anti-tracking extensions) to enhance privacy. For analytics services like Google Analytics, you may install an opt-out browser add-on provided by Google if available. For interest-based advertising, you can opt out of many networks via the NAI Consumer Opt-Out or DAA WebChoices tools (for U.S.-based users), or use platform-specific opt-outs (e.g., through your Google or Facebook account settings). Additionally, some browsers and privacy tools offer global privacy features like “Do Not Track” (DNT) or Global Privacy Control (GPC) signals. Where required by law, our Site will honor such signals as a valid opt-out of certain data processing (for example, an opt-out of sale/sharing under CCPA/CPRA). However, please be aware that not all websites or laws recognize DNT/GPC signals universally; NISETA will treat any enabled GPC signal in your browser as a request to opt out of any personal data sale/sharing (even though we do not sell data), and we will apply it in accordance with relevant legal requirements.

If you have any questions about your privacy rights or need assistance exercising them, you can always reach out to us at the contact information provided in the next section. We are here to help and take your requests seriously.