1. Your Rights
Under GDPR you may request:
- access to the personal data we hold about you;
- rectification of inaccurate or incomplete data;
- erasure (the “right to be forgotten”);
- restriction of processing;
- data portability in a machine-readable format;
- objection to processing based on legitimate interests;
- withdrawal of consent at any time, without affecting prior lawful processing.
2. How to Submit a Request
Logged-in users can submit requests directly from the in-app Privacy Center, which provides one-click data export and account deletion (subject to a 30-day grace period).
You may also email support@shufflecrush.com with the subject line “GDPR Request” and include the type of request, the email associated with your account, and any relevant details. We may ask for proof of identity to protect your data.
3. Response Time
We respond to verified requests within thirty (30) days. Complex cases may be extended by an additional two (2) months with notice, as permitted by Article 12 GDPR.
4. Retention & Anonymization
When you request deletion, your account is soft-deleted immediately and hard-purged after 30 days. Limited records may be retained where strictly required for legal, tax, fraud-prevention, or chargeback purposes, in anonymized or pseudonymized form.
5. Complaints
If you believe your rights have been violated, you may lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels, Belgium — https://www.dataprotectionauthority.be.
6. Data Controller
Controller: YCwebshops (Belgium), operator of ShuffleCrush.
Contact: support@shufflecrush.com