U.S. STATE PRIVACY RIGHTS ‑ LUMEN

Rights for Residents of California, Colorado, Connecticut, Texas, Montana, Oregon, Utah, and Virginia.

Updated September 1, 2024

The United States listed above have passed privacy or consumer data protection laws that create rights for their residents. If your state of residency is listed, you may find those rights listed here.

Effective January 1, 2020 (CCPA) January 1, 2023 (CPRA)

RIGHT to KNOW/ACCESS:

As part of our commitment to protecting your privacy and ensuring transparency, Lumen acknowledges your right to know about and access the personal information that we collect and process about you. This provision outlines your rights and the procedures you can follow to exercise those rights:

Access to Personal Information	You have the right to know how Lumen has collected, used, and/or sold or shared your personal information over the preceding 12 months, and to request access to the personal information held by Lumen.
How to Request Access	To exercise your right of access, you can go to our Data Subject Request Form or send a request to DSR@Lumen.com. The request should include your name, contact information, and any specific details regarding the information you are requesting. We may require additional information to verify your identity and ensure the security of your personal information. In most cases, access to your personal information will be provided free of charge. However, if your request is manifestly unfounded, excessive, or repetitive within the same 12‑month period, we reserve the right to charge a reasonable fee based on administrative costs. We will inform you of any applicable fees before proceeding with your request.
Response and Timeframe	We will acknowledge your request within 10 days. We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions and Limitations	Please note that there may be circumstances where we are unable to grant you access to certain information, including but not limited to situations where the disclosure of such information would infringe upon the rights of others, violate applicable laws, compromise the security and confidentiality of proprietary information, or where we are unable to authenticate the request. In such cases, we will provide you with an explanation for the denial of access and explain any process available to appeal the decision.

RIGHT to CORRECT:

We understand the importance of maintaining accurate and up‑to‑date personal information.

Request to Correct	You have the right to correct inaccuracies in your personal information considering the nature of the personal information and the purposes of the processing of the personal information.
Notice	If we have corrected your personal information following a request, we will communicate the changes to any relevant third parties, where applicable and required by law.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.

RIGHT to DELETION:

We recognize your right to request the deletion of your personal information under applicable privacy laws.

Request to Delete	You have the right to request that we delete the personal information about you stored and collected by Lumen.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions to Deletion	While we strive to accommodate all deletion requests, certain exceptions may apply under applicable laws, including but not limited to situations where retention of the personal information is necessary to comply with legal obligations; to exercise our right to freedom of expression; to detect, investigate, or prevent security incidents or fraudulent activities; or to protect the rights, privacy, or safety of ourselves, our users, or others.

RIGHTS OVER SENSITIVE PERSONAL INFORMATION:

We respect your right to limit the processing of your sensitive personal information under applicable privacy laws.

Rights over Sensitive Personal Information

You have the right to limit the use and disclosure of your sensitive personal information. You can exercise this right by following this link.

If you exercise this right, we will not use or disclose your sensitive personal information for any purpose other than those necessary to provide our services.

RIGHT to OPT‑OUT:

We respect your right to control and manage how your personal information is used, and we provide you with the opportunity to opt out of certain data processing activities.

Opt‑out

You have the right to opt out of targeted advertising and the sale of personal data information. Lumen doesn’t sell personally identifiable information. You may opt‑out of one or more of these purposes by accessing this link.

RIGHT to DATA PORTABILITY:

Portability

If you wish to exercise your right to data portability, you may request a copy of your personal data that we hold in a commonly used and machine‑readable format. This enables you to securely transmit the data to another organization of your choice, or, if technically feasible, we may transmit it directly upon your request.

Notice

To initiate a data portability request, please contact us at DSR@Lumen.com or access Data Subject Request Form. We may require additional verification of your identity to ensure the security of your personal data.

NON‑DISCRIMINATION/RETALIATION:

Non‑discrimination

We will not discriminate against you for exercising your privacy rights, as outlined in this privacy notice, and as provided by applicable laws. This includes, but is not limited to denying you goods, services, or benefits; charging different prices or rates for goods or services or imposing unreasonable conditions, based on your exercise of privacy rights. If you believe that you have been subjected to discrimination or retaliation in violation of your privacy rights, we encourage you to promptly report your concerns to DSR@Lumen.com.

Limitation

However, none of the rights and options provided in this privacy notice shall prohibit us from charging a consumer a different price or rate, or from providing a different level or quality of goods or services to the consumer, if that difference is reasonably related to the value provided to our business by the consumer's data.

RIGHT to APPEAL:

Appeal

If we have not responded to your request within the specified time period, we will inform you of the reasons for not taking action and any rights you may have to appeal our decision.

Effective July 1, 2023

RIGHT to KNOW/ACCESS:

Access to Personal Information	You have the right to confirm whether Lumen processes personal information about you and request access to the personal information held by Lumen.
How to Request Access	To exercise your right of access, you can go to Data Subject Request Form or send a request to DSR@Lumen.com. The request should include your name, contact information, and any specific details regarding the information you are requesting. We may require additional information to verify your identity and ensure the security of your personal information. In most cases, access to your personal information will be provided free of charge. However, if your request is manifestly unfounded, excessive, or repetitive within the same 12‑month period, we reserve the right to charge a reasonable fee based on administrative costs. We will inform you of any applicable fees before proceeding with your request.
Response and Timeframe	We will acknowledge your request within 10 days. We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions and Limitations	Please note that there may be circumstances where we are unable to grant you access to certain information, including but not limited to situations where the disclosure of such information would infringe upon the rights of others, violate applicable laws, compromise the security and confidentiality of proprietary information, or where we are unable to authenticate the request. In such cases, we will provide you with an explanation for the denial of access and explain any process available to appeal the decision.

RIGHT to CORRECT:

We understand the importance of maintaining accurate and up‑to‑date personal information.

Request to Correct	You have the right to correct inaccuracies in your personal information considering the nature of the personal information and the purposes of the processing of the personal information.
Notice	If we have corrected your personal information following a request, we will communicate the changes to any relevant third parties, where applicable and required by law.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.

RIGHT to DELETION:

We recognize your right to request the deletion of your personal information under applicable privacy laws.

Request to Delete	You have the right to request that we delete the personal information about you stored and collected by Lumen.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions to Deletion	While we strive to accommodate all deletion requests, certain exceptions may apply under applicable laws, including but not limited to situations where retention of the personal information is necessary to comply with legal obligations; to exercise our right to freedom of expression; to detect, investigate, or prevent security incidents or fraudulent activities; or to protect the rights, privacy, or safety of ourselves, our users, or others.

RIGHTS OVER SENSITIVE PERSONAL INFORMATION:

We respect your right to limit the processing of your sensitive personal information under applicable privacy laws.

Rights over Sensitive Personal Information

We will not process your sensitive personal information without obtaining your consent.

RIGHT to OPT‑OUT:

We respect your right to control and manage how your personal information is used, and we provide you with the opportunity to opt out of certain data processing activities.

Opt‑out

You have the right to opt out to targeted advertising, the sale of your personal information, and the profiling in furtherance of solely automated decisions that produce legal or similarly significant effects. Lumen doesn’t sell personally identifiable information. You may opt‑out of one or more of these purposes by accessing this link.

RIGHT to DATA PORTABILITY:

Portability

Notice:

To initiate a data portability request, please contact us at DSR@Lumen.com or access our Data Subject Request Form. We may require additional verification of your identity to ensure the security of your personal data.

NON‑DISCRIMINATION/RETALIATION:

Non‑discrimination

Limitations

RIGHT to APPEAL:

Appeal

Within 45 days of the date, we receive your appeal, we will inform you of any action we have taken in response to your appeal.

We may extend the 45‑day period by 60 additional days when reasonably necessary, considering the complexity and number of requests serving as a basis for your appeal. We shall also provide you with any rights you may have to appeal the decision we make. You have the ability to contact the Attorney General if you have concerns about your appeal.

Effective July 1, 2023

RIGHT to KNOW/ACCESS:

Access to Personal Information	You have the right to confirm whether Lumen processes personal information about you and request access to the personal information held by Lumen.
How to Request Access	To exercise your right of access, you can go to Data Subject Request Form or send a request to DSR@Lumen.com. The request should include your name, contact information, and any specific details regarding the information you are requesting. We may require additional information to verify your identity and ensure the security of your personal information. In most cases, access to your personal information will be provided free of charge. However, if your request is manifestly unfounded, excessive, or repetitive within the same 12‑month period, we reserve the right to charge a reasonable fee based on administrative costs. We will inform you of any applicable fees before proceeding with your request.
Response and Timeframe	We will acknowledge your request within 10 days. We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions and Limitations	Please note that there may be circumstances where we are unable to grant you access to certain information, including but not limited to situations where the disclosure of such information would infringe upon the rights of others, violate applicable laws, compromise the security and confidentiality of proprietary information, or where we are unable to authenticate the request. In such cases, we will provide you with an explanation for the denial of access and explain any process available to appeal the decision.

RIGHT to CORRECT:

We understand the importance of maintaining accurate and up‑to‑date personal information.

Request to Correct	You have the right to correct inaccuracies in your personal information considering the nature of the personal information and the purposes of the processing of the personal information.
Notice	If we have corrected your personal information following a request, we will communicate the changes to any relevant third parties, where applicable and required by law.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.

RIGHT to DELETION:

We recognize your right to request the deletion of your personal information under applicable privacy laws.

Request to Delete	You have the right to request that we delete the personal information about you stored and collected by Lumen.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions to Deletion	While we strive to accommodate all deletion requests, certain exceptions may apply under applicable laws, including but not limited to situations where retention of the personal information is necessary to comply with legal obligations; to exercise our right to freedom of expression; to detect, investigate, or prevent security incidents or fraudulent activities; or to protect the rights, privacy, or safety of ourselves, our users, or others.

RIGHTS OVER SENSITIVE PERSONAL INFORMATION:

We respect your right to limit the processing of your sensitive personal information under applicable privacy laws.

Rights over Sensitive Personal Information

We will not process your sensitive personal information without obtaining your consent.

RIGHT to OPT‑OUT and REVOKE CONSENT:

We respect your right to control and manage how your personal information is used, and we provide you with the opportunity to opt out of certain data processing activities.

Opt‑out

Revoke Consent:

You have the right to revoke previously given consent for Lumen to process your personal data. Lumen will honor this request within 15 days of receipt.

RIGHT to DATA PORTABILITY:

Portability

Notice:

To initiate a data portability request, please contact us at DSR@Lumen.com or access our Data Subject Request Form. We may require additional verification of your identity to ensure the security of your personal data.

NON‑DISCRIMINATION/RETALIATION:

Non‑discrimination

Limitations

RIGHT to APPEAL:

Appeal

If you are unhappy with how Lumen has responded to your request to exercise any of the rights above, you may appeal the decision within a reasonable time.

Within 60 days of the date we receive your appeal, we will inform you of any action we have taken in response to your appeal, along with a written explanation of the reasons for our response.

We shall also provide you with any rights you may have to appeal the decision we make. You have the ability to contact the Attorney General if you have concerns about your appeal.

Effective October 1, 2024

RIGHT to KNOW/ACCESS:

Access to Personal Information	You have the right to confirm whether Lumen processes personal information about you and request access to the personal information held by Lumen.
How to Request Access	To exercise your right of access, you can go to Data Subject Request Form or send a request to DSR@Lumen.com. The request should include your name, contact information, and any specific details regarding the information you are requesting. We may require additional information to verify your identity and ensure the security of your personal information. In most cases, access to your personal information will be provided free of charge. However, if your request is manifestly unfounded, excessive, or repetitive within the same 12‑month period, we reserve the right to charge a reasonable fee based on administrative costs. We will inform you of any applicable fees before proceeding with your request.
Response and Timeframe	We will acknowledge your request within 10 days. We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions and Limitations	Please note that there may be circumstances where we are unable to grant you access to certain information, including but not limited to situations where the disclosure of such information would infringe upon the rights of others, violate applicable laws, compromise the security and confidentiality of proprietary information, or where we are unable to authenticate the request. In such cases, we will provide you with an explanation for the denial of access and explain any process available to appeal the decision.

RIGHT to CORRECT:

We understand the importance of maintaining accurate and up‑to‑date personal information.

Request to Correct	You have the right to correct inaccuracies in your personal information considering the nature of the personal information and the purposes of the processing of the personal information.
Notice	If we have corrected your personal information following a request, we will communicate the changes to any relevant third parties, where applicable and required by law.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.

RIGHT to DELETION:

We recognize your right to request the deletion of your personal information under applicable privacy laws.

Request to Delete	You have the right to request that we delete the personal information about you stored and collected by Lumen.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions to Deletion	While we strive to accommodate all deletion requests, certain exceptions may apply under applicable laws, including but not limited to situations where retention of the personal information is necessary to comply with legal obligations; to exercise our right to freedom of expression; to detect, investigate, or prevent security incidents or fraudulent activities; or to protect the rights, privacy, or safety of ourselves, our users, or others.

RIGHTS OVER SENSITIVE PERSONAL INFORMATION:

We respect your right to limit the processing of your sensitive personal information under applicable privacy laws.

Rights over Sensitive Personal Information

We will not process your sensitive personal information without obtaining your consent.

RIGHT to OPT‑OUT and REVOKE CONSENT:

We respect your right to control and manage how your personal information is used, and we provide you with the opportunity to opt out of certain data processing activities.

Opt‑out	You have the right to opt out to targeted advertising, the sale of your personal information, and the profiling in furtherance of solely automated decisions that produce legal or similarly significant effects. Lumen doesn’t sell personally identifiable information. You may opt‑out of one or more of these purposes by accessing this link.
Revoke Consent	You have the right to revoke previously given consent for Lumen to process your personal data. Lumen will honor this request within 45 days of receipt.

RIGHT to DATA PORTABILITY:

Portability

Notice:

NON‑DISCRIMINATION/RETALIATION:

Non‑discrimination

Limitations

RIGHT to APPEAL:

Appeal

If you are unhappy with how Lumen has responded to your request to exercise any of the rights above, you may appeal the decision within a reasonable time.

Within 45 days of the date we receive your appeal, we will inform you of any action we have taken in response to your appeal, along with a written explanation of the reasons for our response.

We shall also provide you with any rights you may have to appeal the decision we make. You have the ability to contact the Attorney General if you have concerns about your appeal.

Effective July 1, 2024

RIGHT to KNOW/ACCESS:

Access to Personal Information	You have the right to confirm whether Lumen processes personal information about you and request access to the personal information held by Lumen.
How to Request Access	To exercise your right of access, you can go to Data Subject Request Form or send a request to DSR@Lumen.com. The request should include your name, contact information, and any specific details regarding the information you are requesting. We may require additional information to verify your identity and ensure the security of your personal information. In most cases, access to your personal information will be provided free of charge. However, if your request is manifestly unfounded, excessive, or repetitive within the same 12‑month period, we reserve the right to charge a reasonable fee based on administrative costs. We will inform you of any applicable fees before proceeding with your request.
Response and Timeframe	We will acknowledge your request within 10 days. We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions and Limitations	Please note that there may be circumstances where we are unable to grant you access to certain information, including but not limited to situations where the disclosure of such information would infringe upon the rights of others, violate applicable laws, compromise the security and confidentiality of proprietary information, or where we are unable to authenticate the request. In such cases, we will provide you with an explanation for the denial of access and explain any process available to appeal the decision.

RIGHT to CORRECT:

We understand the importance of maintaining accurate and up‑to‑date personal information.

Request to Correct	You have the right to correct inaccuracies in your personal information considering the nature of the personal information and the purposes of the processing of the personal information.
Notice	If we have corrected your personal information following a request, we will communicate the changes to any relevant third parties, where applicable and required by law.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.

RIGHT to DELETION:

We recognize your right to request the deletion of your personal information under applicable privacy laws.

Request to Delete	You have the right to request that we delete the personal information about you stored and collected by Lumen.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions to Deletion	While we strive to accommodate all deletion requests, certain exceptions may apply under applicable laws, including but not limited to situations where retention of the personal information is necessary to comply with legal obligations; to exercise our right to freedom of expression; to detect, investigate, or prevent security incidents or fraudulent activities; or to protect the rights, privacy, or safety of ourselves, our users, or others.

RIGHTS OVER SENSITIVE PERSONAL INFORMATION:

We respect your right to limit the processing of your sensitive personal information under applicable privacy laws.

Rights over Sensitive Personal Information

We will not process your sensitive personal information without obtaining your consent.

RIGHT to OPT‑OUT and REVOKE CONSENT:

We respect your right to control and manage how your personal information is used, and we provide you with the opportunity to opt out of certain data processing activities.

Opt‑out	You have the right to opt out to targeted advertising, the sale of your personal information, and the profiling in furtherance of solely automated decisions that produce legal or similarly significant effects. Lumen doesn’t sell personally identifiable information. You may opt‑out of one or more of these purposes by accessing this link.
Revoke Consent	You have the right to revoke previously given consent for Lumen to process your personal data. Lumen will honor this request within 15 days of receipt.

RIGHT to DATA PORTABILITY:

Portability

Notice:

NON‑DISCRIMINATION/RETALIATION:

Non‑discrimination

Limitations

RIGHT to APPEAL:

Appeal

If you are unhappy with how Lumen has responded to your request to exercise any of the rights above, you may appeal the decision within a reasonable time.

Within 45 days of the date we receive your appeal, we will inform you of any action we have taken in response to your appeal, along with a written explanation of the reasons for our response.

We shall also provide you with any rights you may have to appeal the decision we make. You have the ability to contact the Attorney General if you have concerns about your appeal.

Effective July 1, 2024

RIGHT to KNOW/ACCESS:

Access to Personal Information	You have the right to confirm whether Lumen processes personal information about you and request access to the personal information held by Lumen.
How to Request Access	To exercise your right of access, you can go to Data Subject Request Form or send a request to DSR@Lumen.com. The request should include your name, contact information, and any specific details regarding the information you are requesting. We may require additional information to verify your identity and ensure the security of your personal information. In most cases, access to your personal information will be provided free of charge. However, if your request is manifestly unfounded, excessive, or repetitive within the same 12‑month period, we reserve the right to charge a reasonable fee based on administrative costs. We will inform you of any applicable fees before proceeding with your request.
Response and Timeframe	We will acknowledge your request within 10 days. We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions and Limitations	Please note that there may be circumstances where we are unable to grant you access to certain information, including but not limited to situations where the disclosure of such information would infringe upon the rights of others, violate applicable laws, compromise the security and confidentiality of proprietary information, or where we are unable to authenticate the request. In such cases, we will provide you with an explanation for the denial of access and explain any process available to appeal the decision.

RIGHT to CORRECT:

We understand the importance of maintaining accurate and up‑to‑date personal information.

Request to Correct	You have the right to correct inaccuracies in your personal information considering the nature of the personal information and the purposes of the processing of the personal information.
Notice	If we have corrected your personal information following a request, we will communicate the changes to any relevant third parties, where applicable and required by law.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.

RIGHT to DELETION:

We recognize your right to request the deletion of your personal information under applicable privacy laws.

Request to Delete	You have the right to request that we delete the personal information about you stored and collected by Lumen.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions to Deletion	While we strive to accommodate all deletion requests, certain exceptions may apply under applicable laws, including but not limited to situations where retention of the personal information is necessary to comply with legal obligations; to exercise our right to freedom of expression; to detect, investigate, or prevent security incidents or fraudulent activities; or to protect the rights, privacy, or safety of ourselves, our users, or others.

RIGHTS OVER SENSITIVE PERSONAL INFORMATION:

We respect your right to limit the processing of your sensitive personal information under applicable privacy laws.

Rights over Sensitive Personal Information

We will not process your sensitive personal information without obtaining your consent.

RIGHT to OPT‑OUT:

We respect your right to control and manage how your personal information is used, and we provide you with the opportunity to opt out of certain data processing activities.

Opt‑out

RIGHT to DATA PORTABILITY:

Portability

Notice:

NON‑DISCRIMINATION/RETALIATION:

Non‑discrimination

Limitations

RIGHT to APPEAL:

Appeal

If you are unhappy with how Lumen has responded to your request to exercise any of the rights above, you may appeal the decision within a reasonable time.

Within 60 days of the date we receive your appeal, we will inform you of any action we have taken in response to your appeal, along with a written explanation of the reasons for our response.

We shall also provide you with any rights you may have to appeal the decision we make. You have the ability to contact the Attorney General if you have concerns about your appeal.

Effective December 31, 2023

RIGHT to KNOW/ACCESS:

Access to Personal Information	You have the right to confirm whether Lumen processes personal information about you and request access to the personal information held by Lumen.
How to Request Access	To exercise your right of access, you can go to our Data Subject Request Form or send a request to DSR@Lumen.com. The request should include your name, contact information, and any specific details regarding the information you are requesting. We may require additional information to verify your identity and ensure the security of your personal information. In most cases, access to your personal information will be provided free of charge. However, if your request is manifestly unfounded, excessive, or repetitive within the same 12‑month period, we reserve the right to charge a reasonable fee based on administrative costs. We will inform you of any applicable fees before proceeding with your request.
Response and Timeframe	We will acknowledge your request within 10 days. We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions and Limitations	Please note that there may be circumstances where we are unable to grant you access to certain information, including but not limited to situations where the disclosure of such information would infringe upon the rights of others, violate applicable laws, compromise the security and confidentiality of proprietary information, or where we are unable to authenticate the request. In such cases, we will provide you with an explanation for the denial of access and explain any process available to appeal the decision.

RIGHT to Correct:

We understand the importance of maintaining accurate and up‑to‑date personal information.

Request to Correct	You have the right to correct inaccuracies in your personal information considering the nature of the personal information and the purposes of the processing of the personal information.
Notice	If we have corrected your personal information following a request, we will communicate the changes to any relevant third parties, where applicable and required by law.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.

RIGHT to DELETION:

We recognize your right to request the deletion of your personal information under applicable privacy laws.

Request to Delete	You have the right to request that we delete the personal information you provided to us.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions to Deletion	While we strive to accommodate all deletion requests, certain exceptions may apply under applicable laws, including but not limited to situations where retention of the personal information is necessary to comply with legal obligations; to exercise our right to freedom of expression; to detect, investigate, or prevent security incidents or fraudulent activities; or to protect the rights, privacy, or safety of ourselves, our users, or others.

RIGHTS Over Sensitive Personal Information

We respect your right to limit the processing of your sensitive personal information under applicable privacy laws.

Rights over Sensitive Personal Information

We will not process your sensitive personal information without providing you with prior notice and the opportunity to opt out.

RIGHT to OPT‑OUT

We respect your right to control and manage how your personal information is used, and we provide you with the opportunity to opt out of certain data processing activities.

Opt‑out

RIGHT to DATA PORTABILITY:

Portability	If you wish to exercise your right to data portability, you may request a copy of your personal data that we hold in a commonly used and machine‑readable format. This enables you to securely transmit the data to another organization of your choice, or, if technically feasible, we may transmit it directly upon your request.
Notice	To initiate a data portability request, please contact us at DSR@Lumen.com or access Lumen’s Data Subject Request Form. We may require additional verification of your identity to ensure the security of your personal data.

NON‑DISCRIMINATION/RETALIATION:

Non‑discrimination

Limitations

Effective January 1, 2023

RIGHT to KNOW/ACCESS:

Access to Personal Information	You have the right to confirm whether Lumen processes personal information about you and request access to the personal information held by Lumen.
How to Request Access	To exercise your right of access, you can go to Data Subject Request Form or send a request to DSR@Lumen.com. The request should include your name, contact information, and any specific details regarding the information you are requesting. We may require additional information to verify your identity and ensure the security of your personal information. In most cases, access to your personal information will be provided free of charge. However, if your request is manifestly unfounded, excessive, or repetitive within the same 12‑month period, we reserve the right to charge a reasonable fee based on administrative costs. We will inform you of any applicable fees before proceeding with your request.
Response and Timeframe	We will acknowledge your request within 10 days. We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions and Limitations	Please note that there may be circumstances where we are unable to grant you access to certain information, including but not limited to situations where the disclosure of such information would infringe upon the rights of others, violate applicable laws, compromise the security and confidentiality of proprietary information, or where we are unable to authenticate the request. In such cases, we will provide you with an explanation for the denial of access and explain any process available to appeal the decision.

RIGHT to CORRECT:

We understand the importance of maintaining accurate and up‑to‑date personal information.

Request to Correct	You have the right to correct inaccuracies in your personal information considering the nature of the personal information and the purposes of the processing of the personal information.
Notice	If we have corrected your personal information following a request, we will communicate the changes to any relevant third parties, where applicable and required by law.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.

RIGHT to DELETION:

We recognize your right to request the deletion of your personal information under applicable privacy laws.

Request to Delete	You have the right to request that we delete the personal information about you stored and collected by Lumen.
Timeframe	We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timeframe for fulfilling your request.
Exceptions to Deletion	While we strive to accommodate all deletion requests, certain exceptions may apply under applicable laws, including but not limited to situations where retention of the personal information is necessary to comply with legal obligations; to exercise our right to freedom of expression; to detect, investigate, or prevent security incidents or fraudulent activities; or to protect the rights, privacy, or safety of ourselves, our users, or others.

RIGHTS OVER SENSITIVE PERSONAL INFORMATION:

We respect your right to limit the processing of your sensitive personal information under applicable privacy laws.

Rights over Sensitive Personal Information

We will not process your sensitive personal information without obtaining your consent.

RIGHT to OPT‑OUT:

We respect your right to control and manage how your personal information is used, and we provide you with the opportunity to opt out of certain data processing activities.

Opt‑out

RIGHT to DATA PORTABILITY:

Portability

Notice:

NON‑DISCRIMINATION/RETALIATION:

Non‑discrimination

Limitations

RIGHT to APPEAL:

Appeal

If you are unhappy with how Lumen has responded to your request to exercise any of the rights above, you may appeal the decision within a reasonable time.

Within 60 days of the date we receive your appeal, we will inform you of any action we have taken in response to your appeal, along with a written explanation of the reasons for our response.

We shall also provide you with any rights you may have to appeal the decision we make. You have the ability to contact the Attorney General if you have concerns about your appeal.