Data Request & Deletion

01 What you can ask for

• Right to know: a summary of the categories of personal information we have on you, why we have it, where we got it, and who we've shared it with.
• Right to access: a copy of the actual data we hold.
• Right to correct: a fix to anything that's wrong.
• Right to delete: erasure of your data, subject to retention requirements below.
• Right to portability: a copy in a portable, machine-readable format.
• Right to opt out: of marketing, of any future processing for a specific purpose.
• Right to withdraw consent: where we relied on consent to collect or process.

These rights are based on state laws (California, Colorado, Connecticut, Virginia, and others) and international laws (GDPR for EU residents). We honor them for everyone, regardless of where you live.

02 How to make a request

Send an email to hello@cmykink.io with the subject "Data Request." In the body, tell us what you want (access, copy, correction, deletion, etc.), enough information to identify you (the name and email address you used with us), and any relevant context.

Alternatively, write to us at:

THE PRINT GROUP, LLC, doing business as CMYK Ink

Attn: Data Request

3850 E. Indian School Rd.

Phoenix, AZ 85018

03 How we verify it's actually you

Before we share, change, or delete data, we verify you're the person whose data it is. For most requests, that means confirming the email address matches one in our records, asking a question or two only you would know, or occasionally a separate confirmation message to the email on file. We don't ask for sensitive ID documents unless the request is for a substantial copy of data that would create a serious risk if mishandled.

04 Authorized agents

You can have someone make the request on your behalf. We'll ask for written authorization from you, and we'll verify the agent's identity too.

05 Our response timeline

We respond within 45 days of receiving a verifiable request. For complex requests, we may extend by an additional 45 days; if so, we tell you within the first 45 days.

06 Cost

The first request you make in any 12-month period is free. For a second or third request in the same window (if it's clearly excessive, repetitive, or designed to harass), we may charge a reasonable fee or decline.

07 What we can't delete

• Tax and accounting records: typically 7 years per Arizona and federal requirements.
• Contract and project records needed to defend against potential legal claims: typically through the relevant statute of limitations.
• Compliance records required by law.
• Suppression records: if you unsubscribed from marketing, we keep a record of that so we don't accidentally re-add you.
• Backups in progress: we delete from active systems immediately, but backups expire on their own rotation (typically 30–90 days).

We tell you what we couldn't delete and why.

08 If we deny your request

We may deny a request if we can't verify your identity, the request is manifestly unfounded or excessive, or fulfilling it would violate the law, infringe on someone else's rights, or compromise security. If we deny, we tell you in writing, explain why, and tell you what you can do to appeal.

09 The internal owner

Inside the studio, data requests are owned by the studio principal. Each request is logged: date received, date verified, what was asked for, what we did, and the date of final response.

10 Don't retaliate, won't retaliate

We will not retaliate against you for exercising any of these rights — not by raising prices, ending a project, refusing future work, or anything else.

11 Updates

If state or federal data-rights law changes in a way that broadens what you can ask for, we update this policy and broaden our response accordingly.