GDPR & Data Protection

This page explains how PILOTLAB LLC, the operator of InboxVet, handles personal data under the EU General Data Protection Regulation (GDPR) and the UK GDPR, and briefly covers California privacy law. It supplements our Privacy Policy, which lists what we collect and how long we keep it.

InboxVet plays two different roles depending on the data:

As a processor, we process your lists only to provide the verification service to you, following your instructions. We do not use them for our own purposes and we never sell them.

Under the GDPR and UK GDPR you have the right to:

• Access— get a copy of the personal data we hold about you;
• Rectification— have inaccurate data corrected;
• Erasure— have your data deleted;
• Restriction— ask us to limit how we use your data;
• Portability— receive your data in a structured, machine-readable format;
• Objection— object to processing based on legitimate interests;
• Withdraw consent — at any time, for example through cookie settings, without affecting earlier processing;
• Complain— to a supervisory authority (see below).

1. Email support@inboxvet.comwith the subject “Privacy request” and tell us which right you want to use.
2. We may ask you to confirm your identity, for example from the email address on your account.
3. We respond within one month. For complex or numerous requests we may extend this by up to two more months, and we will tell you if we do.

We have not appointed a Data Protection Officer or an EU or UK representative. All privacy requests are handled at support@inboxvet.com.

We are based in the United States and our service providers process data there (uploaded CSV files are stored in AWS us-east-2). When personal data from the EEA or UK is transferred to the US, where required we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK equivalent).

Business customers who need a Data Processing Agreement (DPA) under Article 28 GDPR for the lists they verify with us can request one by emailing support@inboxvet.com.

We use the following service providers to run InboxVet:

Mailbox checks are run by our own verification servers, which connect to the recipient’s mail server without sending any email.

We protect personal data with measures described in our Privacy Policy, including HTTPS, hashed passwords, sign-in logging and an audit log of staff actions on accounts.

If we become aware of a personal data breach affecting your data, we will notify affected customers without undue delay, with the information they need to meet their own obligations.

Sign-in and sign-up security logs and homepage verifier logs are kept for 12 months. Account and verification data are kept while your account is active and deleted on request or within a reasonable period after the account is closed. See the full retention table.

We do not sell personal information. The only “sharing” for cross-context behavioural advertising happens if you opt in to marketing cookies, which enables the Meta Pixel. Because it is opt-in, nothing is shared unless you choose it, and you can switch it off at any time in cookie settings.

You can also send “Do Not Sell or Share”, access or deletion requests to support@inboxvet.com. We will not discriminate against you for exercising these rights.

Please contact us first at support@inboxvet.com so we can try to resolve your concern. You also have the right to complain to a supervisory authority:

• in the EEA, the data protection authority in the country where you live or work, or where the issue arose;
• in the UK, the Information Commissioner’s Office (ico.org.uk).

Contact

PILOTLAB LLC, 304 S. Jones Blvd, Las Vegas, Nevada 89107, USA · support@inboxvet.com · 1 888 370 6801