- 1. Statutory rights recognized under GDPR & CCPA
- 2. Workspace accounts vs. recipient contacts
- 3. Submitting a verified data rights request
- 4. Identity verification & fraud prevention
- 5. Response timelines, fulfillment & format
- 6. Escalation, appeals & supervisory authorities
- 7. Frequently asked data rights questions
1. Statutory rights recognized under GDPR & CCPA
MailCheckup recognizes and upholds the comprehensive suite of statutory rights afforded to individuals worldwide:
- Access (GDPR Art. 15 / CCPA § 1798.100): Right to know whether your personal data is processed, the specific categories of records held, processing purposes, and recipients.
- Rectification (GDPR Art. 16): Right to correct incomplete, inaccurate, or outdated personal information.
- Erasure / Deletion (GDPR Art. 17 / CCPA § 1798.105): Right to obtain permanent deletion of personal data from active systems and backups.
- Restriction of Processing (GDPR Art. 18): Right to temporarily restrict processing while data accuracy or legal grounds are contested.
- Data Portability (GDPR Art. 20): Right to receive your personal records in an industry-standard, machine-readable JSON or CSV format.
- Right to Object (GDPR Art. 21): Right to object at any time to data processing grounded in legitimate interests.
2. Workspace accounts vs. recipient contacts
To ensure requests are handled correctly under applicable data protection laws, we distinguish between two separate categories of individuals:
- Workspace Account Holders: Registered users who created an account on cp.mailcheckup.net. For these individuals, Secuno LLC acts as Data Controller, and we handle requests directly across our user database, billing ledger, and security logs.
- Recipient List Contacts: Individuals whose email addresses were uploaded by a third-party business customer for deliverability verification. For these records, the customer is the Data Controller, and Secuno LLC acts strictly as a Data Processor under GDPR Article 28. In such cases, we forward the request to the customer workspace or, upon request, add your email address to our internal Global Permanent Suppression Blocklist so it can never be verified by any customer.
3. Submitting a verified data rights request
To submit a request, send an email from the specific address in question to privacy@mailcheckup.net. Please include:
- Your full name and primary email address.
- Whether you are a registered MailCheckup customer or a recipient inquiring about an address check.
- The specific statutory right you wish to exercise (Access, Deletion, Rectification, or Global Suppression).
4. Identity verification & fraud prevention
To protect privacy and prevent unauthorized third parties from obtaining contact records, we verify identity using proportionate methods:
We generate a one-time cryptographic confirmation link sent directly to the queried email address. Clicking this link confirms control over the account without requiring sensitive documents such as driver's licenses, passports, or national ID cards.
5. Response timelines, fulfillment & format
Our Privacy Engineering desk adheres to strict statutory SLAs:
- Acknowledgment: Formal written confirmation of receipt within five (5) business days.
- Substantive Fulfillment: Full fulfillment within thirty (30) calendar days from receipt of verified identity. If complex technical searches require an extension, we will notify you within 30 days explaining the technical rationale.
- Zero Cost: Requests are processed completely free of charge.
6. Escalation, appeals & supervisory authorities
If you believe our resolution of your data rights request was incomplete, you may submit an appeal to Corporate Legal Counsel at legal@mailcheckup.net, or file a complaint with the Wyoming Attorney General's Consumer Protection Unit or your local European Data Protection Authority.
The table below summarizes our rights fulfillment operational matrix:
| Privacy Right | Legal Mandate | Submission Route | Verification Standard | Statutory SLA |
|---|---|---|---|---|
| Right of Access (DSAR) | GDPR Art. 15 / CCPA § 1798.100 | Email privacy@mailcheckup.net | Email confirmation token | 30 Calendar Days |
| Right to Rectification | GDPR Art. 16 | Account Settings / Support Desk | Authenticated session | 10 Business Days |
| Right to Erasure (Forgotten) | GDPR Art. 17 / CCPA § 1798.105 | Email privacy@mailcheckup.net | Email confirmation token | 30 Calendar Days |
| Right to Restriction | GDPR Art. 18 | Email privacy@mailcheckup.net | Email confirmation token | 30 Calendar Days |
| Right to Data Portability | GDPR Art. 20 | Workspace Export / Privacy Desk | Authenticated session | 30 Calendar Days |
| Right to Object (Suppression) | GDPR Art. 21 | Global Suppression Request Form | Email confirmation token | 5 Business Days |
7. Frequently asked data rights questions
How do I submit a formal Data Subject Access Request (DSAR)?
Send an email from the address you wish to query to privacy@mailcheckup.net with the subject line 'Personal Data Subject Request'. Specify whether you seek access, correction, or permanent erasure.
What happens if my email appears on a customer's uploaded list?
If your email was uploaded by a MailCheckup business customer, that customer is the Data Controller. Under GDPR Article 28, we will notify the responsible customer workspace of your request, or at your request, place your address onto our Global Permanent Suppression Blocklist so that no customer can ever verify your email again.
What verification is required to confirm my identity?
To prevent malicious data harvesting, we verify that you control the specific email address requested by sending a one-time cryptographic confirmation link. We do not require government passport scans or utility bills.
Can an authorized agent submit a request on my behalf under CCPA?
Yes. Under California Civil Code § 1798.135, authorized agents may submit requests on behalf of consumers. The agent must provide written authorization signed by the consumer and verify their own identity.
In what format will I receive my personal data?
Data portability exports are delivered via secure encrypted links in structured, industry-standard machine-readable JSON or CSV formats.
Who can I contact if I am dissatisfied with the response to my request?
You may appeal our determination by writing directly to our Corporate Legal Counsel at legal@mailcheckup.net. European residents also possess the statutory right to lodge a complaint with their local Data Protection Authority.