Customer Data Request Policy

Storefront Labs, LLC

How Storefront receives, verifies, evaluates, and responds to requests involving personal information.

Effective DateAugust 5, 2026
Applies ToPrivacy and Personal Data Requests
Contacthello@storefrontworks.com

1. Purpose and Scope

This Customer Data Request Policy explains how Storefront Labs, LLC (“Storefront”) receives, verifies, evaluates, and responds to requests concerning access, correction, deletion, export, restriction, objection, or other privacy rights involving personal information.

This Policy applies to requests submitted by individuals, customers, business contacts, authorized agents, and other persons where applicable law provides a relevant right.

2. Relationship to Other Documents

Incorporated policy. This Policy is incorporated into and forms part of the Storefront Terms of Use. It should be read together with the Privacy Policy, Data Retention and Deletion Policy, and applicable customer agreements.

If this Policy conflicts with the Terms of Use regarding privacy-rights requests, this Policy controls solely for that subject matter unless an executed Order states otherwise.

3. Controller and Processor Roles

For information Storefront collects and controls for its own business purposes, Storefront may respond directly to a verified request.

Where Storefront processes personal information solely on behalf of a business customer, the business customer generally acts as controller or business and Storefront generally acts as processor or service provider.

In those circumstances, Storefront may refer the requester to the applicable business customer, notify the business customer, assist that customer, or take another action required by law or an applicable Order.

4. Types of Requests

Request TypeDescription
AccessRequest confirmation, a summary, or a copy of eligible personal information.
CorrectionRequest correction of inaccurate or incomplete personal information.
DeletionRequest deletion of eligible personal information where applicable law provides that right.
Export or PortabilityRequest eligible information in a commonly used format where required by law.
Restriction or ObjectionRequest limits on certain processing where applicable law provides such rights.
Opt-OutRequest an opt-out from certain sales, sharing, targeted advertising, or marketing where applicable.
AppealRequest review of a prior decision where applicable law provides an appeal right.

5. How to Submit a Request

Requests may be submitted by email to hello@storefrontworks.com.

A request should include the requester’s name, associated account or contact information, requested action, relevant Storefront product or business customer, and information reasonably necessary to locate the records.

Requesters should not send passwords, complete payment-card numbers, government identification numbers, or unnecessary sensitive information in an initial email.

6. Identity Verification

Storefront may take reasonable steps to verify identity and authority before fulfilling a request. Verification requirements may vary based on the sensitivity of the information, nature of the action, risk of unauthorized disclosure or deletion, information associated with the account, and applicable law.

Storefront may decline a request if identity or authority cannot be verified to a reasonable degree of certainty.

7. Authorized Agents

Where permitted by law, an authorized agent may submit a request on behalf of another individual. Storefront may require written authorization, verification of the agent, verification of the individual, and direct confirmation from the individual.

8. Review and Response Process

Storefront may acknowledge receipt, verify identity and authority, determine Storefront’s role and applicable law, search relevant systems, coordinate with a business customer, apply lawful exceptions, provide the requested action, and explain a denial or partial denial where required.

9. Response Timing

Storefront will respond within the period required by applicable law or, where no statutory deadline applies, within a commercially reasonable period.

Where permitted, Storefront may extend the response period due to complexity, request volume, verification, third-party dependencies, legal review, or coordination with a business customer. Where required, Storefront will notify the requester of an extension and the reason.

10. Limitations and Exceptions

Not every request can be fulfilled in full. Storefront may deny, limit, or defer a request where permitted or required by law.

Examples include information retained for security, fraud prevention, billing, tax, accounting, litigation, legal holds, contract enforcement, confidentiality, privilege, third-party rights, backup rotation, de-identification, or other lawful purposes.

Storefront may also decline requests that are manifestly unfounded, excessive, repetitive, technically infeasible, or outside the scope of applicable law.

11. Appeals

If Storefront denies a request and applicable law provides an appeal right, the requester may submit an appeal to hello@storefrontworks.com, identifying the original request, the decision, and the reason for reconsideration.

12. Request Records

Storefront may retain records of requests, verification, correspondence, decisions, disclosures, deletions, appeals, and related actions for a reasonable period to demonstrate compliance, prevent fraud, resolve disputes, and protect legal rights.

13. Changes to This Policy

Storefront may update this Policy prospectively as laws, products, systems, and operational practices evolve. The current version will be identified by its effective date.

14. Contact Information

Storefront Labs, LLC
1642 Burgos Dr
Sarasota, FL 34238
United States

Email: hello@storefrontworks.com
Website: www.storefrontworks.com

Last Updated: August 26, 2026