Data Rights and GDPR

1. Scope

This page describes the privacy-request process used by Black Sands Ventures, Inc.. Rights vary by location and the circumstances of processing. Nothing on this page limits rights that cannot be waived under applicable law.

2. Rights that may apply

• Be informed about how personal information is used.
• Request access to personal information and related processing information.
• Request correction of inaccurate or incomplete information.
• Request deletion where an applicable legal basis does not require continued retention.
• Request restriction of certain processing.
• Object to certain processing, including direct marketing.
• Request portable data in a commonly used, machine-readable format when applicable.
• Withdraw consent for processing based on consent without affecting earlier lawful processing.
• Ask for human review where a qualifying decision is based solely on automated processing.
• Complain to an applicable data-protection authority.

3. Submit a request

Use the privacy controls in your signed-in account when available or email [email protected] from the address connected to the account. State the right you wish to exercise and the account email. Do not send passwords, full card numbers, or authentication codes.

Console provides authorized operators with an export process for UNIVRS account and application data. Account deletion remains subject to the configured 30-day retention window, ownership-transfer checks, legal retention, security records, and anonymized financial or audit records.

4. Identity verification

We may ask for information reasonably necessary to confirm the requestor controls the account. An authorized agent may be required to provide proof of authority and the account holder may be asked to confirm the request directly.

5. Response timing

We aim to acknowledge requests promptly and respond within the period required by applicable law. Complex or multiple requests may require an allowed extension, in which case notice will be provided where required.

6. Access and portability exports

A data export may include profile and membership state, Trips, voyage and trip-day records, household or Crew relationships, Passport activity, saves, notifications, consent history, and other records associated with the account. It excludes other users’ private information, security secrets, raw payment-card data, privileged material, and information we are legally permitted or required to withhold.

7. Deletion and retention

Deletion removes or anonymizes eligible personal information after the account’s retention window. We may retain limited information for financial reporting, fraud prevention, security, dispute resolution, legal obligations, backup rotation, and proof that a request was completed. Shared Trips, Families, Crews, or other owned records may require transfer, archival, or deletion before final completion.

8. Direct marketing and cookie choices

Marketing email includes an unsubscribe path. You can also change optional cookie choices through the persistent Privacy choices control. Service, account, billing, security, and trip-operation messages may still be sent when necessary to provide the requested service or meet legal obligations.

9. International processing

UNIVRS is operated from the United States and may use service providers in other countries. Where legally required, international transfers should use an approved safeguard or another valid transfer mechanism.

10. Contact and complaints

Privacy contact: [email protected]
Black Sands Ventures, Inc.
1050 E Flamingo Rd s107, Las Vegas, NV 89119

You may also contact the data-protection authority that applies where you live or work.