Can I opt out of the sale of my personal information?

NeuAnalytics does not sell personal information. You may also request deletion, correction, or a copy of your data through the form on this page.

Who can submit a privacy request?

California (CCPA/CPRA), Virginia (VCDPA), and EU/UK (GDPR) residents have statutory rights. Residents of other jurisdictions may also contact us with privacy requests.

How quickly will my privacy request be processed?

We process verified requests within 30–45 days as required by CCPA, CPRA, VCDPA, and GDPR. Complex requests may be extended by an additional 45 days with notice.

Your Privacy Choices

Your Privacy Choices, exercise your CCPA opt-out, Do Not Sell or Share My Personal Information, and other privacy rights under CCPA/CPRA, VCDPA, and GDPR.

Last updated: 2026-05-16 | Effective: [EFFECTIVE DATE]

⚠️ DRAFT, FOR COUNSEL REVIEW. This page provides intake mechanisms for the privacy rights described in our Privacy Policy, including CCPA/CPRA, VCDPA (and similar state laws), and GDPR rights. Items in [BRACKETS] require confirmation by NeuAnalytics. Before publishing, also confirm that the email inbox and phone line referenced below are monitored within statutory response windows and that a DSR fulfillment workflow is in place.

This Your Privacy Choices page is how NeuAnalytics, Inc. ("NeuAnalytics," "we," "us," or "our") lets you exercise the privacy rights available to you, including the CCPA opt-out from sale or sharing of personal information, the "Do Not Sell or Share My Personal Information" right, and the comparable rights granted under VCDPA, GDPR, and other state and international privacy statutes. For full disclosures, see our Privacy Policy.

1. Rights Available to You

The specific rights you have depend on the law that applies to you. Even if you do not reside in a jurisdiction that grants a particular right, you are welcome to submit a request and we will respond as a matter of policy where reasonable.

1.1 California Residents (CCPA / CPRA)

Right to know / access. Request the categories and specific pieces of personal information we have collected, the categories of sources, the business or commercial purposes for collection, and the categories of third parties to whom we disclose personal information.
Right to delete. Request deletion of personal information we have collected from you, subject to statutory exceptions.
Right to correct. Request correction of inaccurate personal information.
Right to opt out of "sale" or "sharing." Even though NeuAnalytics does not sell or share personal information for cross-context behavioral advertising, you may submit an opt-out request at any time. [CONFIRM with Marketing, if advertising pixels are deployed this paragraph needs to change to "you have the right to opt out of the sharing of your personal information for cross-context behavioral advertising," and we must honor the opt-out across devices/sessions.]
Right to limit use of sensitive personal information. NeuAnalytics does not intentionally collect sensitive personal information through this Site or use it for purposes beyond those permitted by Cal. Civ. Code §1798.121(a); accordingly, no separate "limit" mechanism is required.
Right to non-discrimination. We will not deny you services, charge different prices, or provide a different quality of service because you exercised a right.
Right to designate an authorized agent. You may designate an authorized agent to submit a request on your behalf (see Section 4).

1.2 Virginia Residents (VCDPA) and Other State Privacy Law Residents

If you are a resident of Virginia or another state whose consumer privacy statute follows the VCDPA framework, including Colorado, Connecticut, Utah, Texas, Florida (large-company FDBR), Oregon, Montana, Iowa, Tennessee, Indiana, Delaware, New Hampshire, New Jersey, Minnesota, and Maryland, you have these rights, subject to the variations in each state's statute:

Right to confirm processing & access your personal data.
Right to correct inaccurate personal data.
Right to delete personal data we have collected.
Right to data portability, to receive your personal data in a readily usable format.
Right to opt out of (i) targeted advertising, (ii) the sale of personal data, and (iii) profiling that produces legal or similarly significant effects. NeuAnalytics does not engage in profiling that produces such effects.
Right to appeal a denied request (see Section 5).

[Counsel should confirm each state's applicability thresholds for NeuAnalytics and whether any state requires a different opt-out mechanism, e.g., Colorado's Universal Opt-Out Mechanism (UOOM) rules.]

1.3 Residents of the EEA, United Kingdom, or Switzerland (GDPR / UK GDPR / nFADP)

Right of access (Art. 15), confirmation of processing and a copy of your personal data.
Right to rectification (Art. 16), correct inaccurate data.
Right to erasure (Art. 17, "right to be forgotten").
Right to restriction of processing (Art. 18).
Right to data portability (Art. 20).
Right to object (Art. 21), including to processing for direct marketing.
Right to withdraw consent (Art. 7(3)), at any time, without affecting prior lawful processing.
Right not to be subject to automated decision-making (Art. 22). NeuAnalytics does not engage in automated decision-making with legal effect about website visitors.
Right to lodge a complaint with your supervisory authority, see Section 6.

2. How to Submit a Request

You may submit a privacy request through any of the following methods. Please include enough information for us to identify your records and verify your request (your name, the email address you used when interacting with us, your state or country of residence, and a description of the right you wish to exercise).

Email: privacy@neuanalytics.com, use subject line "Privacy Request, [state/country], [right]" (e.g., "Privacy Request, California, Delete").
Phone: +1.913.825.0000, ask for the Privacy Team.
Postal mail: NeuAnalytics, Inc., Attn: Privacy, [STREET ADDRESS, OVERLAND PARK, KS ZIP].
GPC signal: See Section 7. If your browser sends a GPC signal we will automatically record the opt-out for your device.

[OPTIONAL: link to a hosted DSR intake form (OneTrust / Transcend / DataGrail / Termly) once provisioned. A live form generally produces a better evidence trail than email for audit purposes.]

3. Verification of Your Identity

To protect your privacy and security and to prevent fraudulent requests, we will verify your identity before responding to a substantive request. The level of verification we require depends on the sensitivity of the information involved and the type of request.

Standard requests (e.g., right to know about categories, right to opt out): we typically verify by matching information you provide to information already in our records, such as the business email address you previously used when contacting us.
Higher-risk requests (e.g., right to know specific pieces of information, right to delete): we may ask you for additional information or a signed declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.
We will not require you to create an account in order to submit a request. If you have an existing account, you may be asked to authenticate through that account.

If we cannot reasonably verify your identity using the information you provide, we may decline to act on the request and will notify you of the reason. You may then re-submit with additional information or use an authorized agent.

4. Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We may require:

Written, signed permission from you authorizing the agent to act on your behalf (a Power of Attorney granted under applicable state law also satisfies this requirement);
Verification of the agent's identity; and
Verification of your identity directly with us, as described in Section 3.

5. Response Timeframes; Appeals

We will respond to verifiable requests within the timeframes required by applicable law:

CCPA/CPRA (California): We will acknowledge receipt within 10 business days and respond substantively within 45 calendar days. We may take a single 45-day extension where reasonably necessary and consistent with Cal. Civ. Code §1798.130(a)(2)(A), with notice to you of the extension and the reason.
VCDPA (Virginia) and similar state laws: We will respond within 45 calendar days. We may take a single 45-day extension where reasonably necessary, with notice. If we decline to act on a request, you may appeal within a reasonable time (see below).
GDPR / UK GDPR / nFADP: We will respond within one month of receipt. We may extend by up to two further months where necessary, with notice to you of the extension and the reasons for it.

Appeals. If we decline to act on a request in whole or in part:

California: Email privacy@neuanalytics.com with subject line "California Appeal." We will reconsider the decision and respond.
Virginia and similar states: Email privacy@neuanalytics.com with subject line "[State] Appeal." We will respond within 60 days. If we deny the appeal, we will provide instructions to submit a complaint to your state Attorney General.

6. Right to Lodge a Complaint with a Supervisory Authority

If you are in the EEA, the United Kingdom, or Switzerland and believe our processing of your personal data violates applicable law, you have the right to lodge a complaint with your supervisory authority:

European Economic Area: the list of national supervisory authorities is available at edpb.europa.eu.
United Kingdom: the Information Commissioner's Office, ico.org.uk.
Switzerland: the Federal Data Protection and Information Commissioner, edoeb.admin.ch.

If you are a California resident and you believe we have not complied with your CCPA rights, you may contact the California Privacy Protection Agency at cppa.ca.gov or the California Attorney General at oag.ca.gov/privacy/ccpa.

7. Global Privacy Control (GPC)

Global Privacy Control is a browser-level signal that communicates your privacy preferences to the websites you visit. When enabled, GPC indicates that you do not want your personal information sold or shared for cross-context behavioral advertising.

NeuAnalytics honors GPC signals automatically. If your browser or a browser extension sends a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of your personal information and (where required) as an opt-out from targeted advertising and the sale of personal data under VCDPA-family state laws. No additional action is required on your part.

You can enable GPC by:

Using a browser that supports GPC natively, such as Firefox, Brave, or DuckDuckGo;
Installing a browser extension that sends GPC signals, such as Privacy Badger or OptMeowt.

For more information, visit globalprivacycontrol.org.

8. Non-Discrimination and Non-Retaliation

We will not discriminate or retaliate against you for exercising any of your privacy rights. We will not:

Deny you goods or services;
Charge different prices or rates for goods or services, whether through the use of discounts or otherwise;
Provide a different level or quality of goods or services; or
Suggest that you may receive a different price, rate, level, or quality.

NeuAnalytics does not offer financial incentives in exchange for personal information.

9. Children

The Site is intended for adult business audiences. We do not knowingly sell or share the personal information of consumers under 16 years of age and do not knowingly process the personal information of children under 13.

10. Contact Us

For questions about your privacy choices or for assistance submitting a request:

Email: privacy@neuanalytics.com
Phone: +1.913.825.0000
Postal mail: NeuAnalytics, Inc., Attn: Privacy, [STREET ADDRESS, OVERLAND PARK, KS ZIP]

For full details on how we collect, use, share, and protect your personal information, see our Privacy Policy and Cookie Policy.