1. Request channels
Use privacy@atlantic-image-defense.com for privacy rights and security@atlantic-image-defense.com for vulnerability or incident reports. Do not include unnecessary identity documents in the first message.
2. Information to provide
Identify the relevant account, case reference or email, the right requested, jurisdiction and enough context to locate the data. Never disclose a private case code in a public forum.
3. Identity and authority verification
Atlantic verifies identity and representative authority proportionately. Verification may use existing authenticated access, email confirmation, case facts or, only when necessary, a secure identity-document channel.
4. Response process
Requests are acknowledged, assessed against applicable law, searched across relevant systems and answered within the legal period. Complex or numerous requests may receive a lawful extension notice.
5. Exceptions and preservation
Deletion or access may be limited for another person’s rights, legal privilege, security, fraud prevention, tax/accounting duties, legal claims, court orders or preservation obligations. Atlantic explains the applicable reason where permitted.
6. Appeals and complaints
Where applicable, a person may appeal a denied request to Atlantic and complain to a competent privacy regulator or attorney general. Atlantic does not retaliate for exercising lawful privacy rights.
7. Security reports
Good-faith vulnerability reports should describe the issue without accessing unrelated data, disrupting service or publicly disclosing before reasonable remediation. Atlantic may coordinate a safe-harbor process in writing.
8. Request records
Atlantic keeps a limited record of the request, verification, decision and response to demonstrate compliance, prevent repeated abuse and protect the parties’ rights.
