Consumer Privacy Request and Appeals Procedure

1. Submission Method

Privacy requests should be directed to Contact@GEISolutions.com. GEIS may later establish a dedicated request webform or authenticated portal workflow.

2. Intake and Logging

GEIS should log each request with the date received, requester identity information provided, type of request, jurisdiction if known, verification status, assigned reviewer, and response deadline if applicable.

3. Verification

GEIS may request reasonable information necessary to confirm the requester’s identity and authority. GEIS should avoid collecting excessive data solely for verification purposes.

4. Review

GEIS should determine whether the request appears to fall under an applicable law, whether any legal exceptions apply, and whether GEIS has sufficient information to respond.

If the request concerns targeted advertising choices or cookie-level rights, GEIS should coordinate the response with the current website and marketing configuration.

5. Response

GEIS should respond within any applicable legal timeframe or, if no specific law applies, within a commercially reasonable period.

Responses should state whether GEIS is granting, partially granting, or denying the request and should explain any legally permitted basis for denial.

6. Appeals

If a law provides an appeal right and GEIS denies a request, GEIS should identify the appeal method and any timeframe for seeking internal review.

Appeals should be reviewed by a person or role not solely responsible for the original denial where practicable.

7. Recordkeeping

GEIS should maintain a record of requests, verification steps, decisions, and response dates for a reasonable retention period, subject to legal, operational, and security considerations.

8. Accessibility

If a requester cannot use the ordinary email or web method because of disability or technology limitations, GEIS should offer a practical alternative communication method.

9. Updates

This procedure should be reviewed whenever GEIS changes its data practices, launches a portal or dApp, adopts new marketing tools, or receives enough requests that a more formal workflow is needed.