Introduction

DSAR stands for Data Subject Access Request. DSAR is a request that individuals (data subjects) can make to an organization to access the personal data that the organization holds about them. DSARs are a key part of data protection laws.

The Data Subject Access Request page offers your website visitors several options to protect their data. These are outlined below.

Note: This is currently a beta that is only available on California based websites.

Summary

• Right to Opt Out of Data Sharing
• Right to Access Their Data
• Right to Delete Their Account
• How will I know if my lead has made a request?

Right to Opt Out of Data Sharing

Website visitors have the right to opt out of having their data shared with any other parties. If a website visitor requests this, we will notify them that opting out of data sharing may impact their user experience when visiting your website.

• If the website visitor is not logged in to the Lofty built website, they will need to opt-out again of having their data shared if they use a different device, browser, or if they clear their cookies.
• If the website visitor is logged into the Lofty built website, their opt-out preference will be associated with their account. This means that they will not need to opt-out again when switching devices, browsers, or clearing cookies — their preference will be automatically applied. 

Right to Access Their Data

Website visitors can request a copy of their personal data that has been collected by using your website. If this is requested, we will first verify the website visitor's email address. Upon successful verification, they will gain access to the data of the lead that is associated with their email address.

This data includes the timeline log of searches, views, favorites, and requests that they have made on your website.

Right to Delete Their Account

Website visitors have the right to request that their personal data be deleted. A ‘Delete Account’ button will be added to the website account settings, when a website visitor is logged in to your Lofty built account. Deletion requests will trigger email verification, like the ‘Right to Access’ option, to verify that the requestor is who they say they are.

When a website visitor requests to delete their account, their lead profile will be placed into the deleted pipeline. The lead will no longer receive any email or text communication. At the same time, the lead's assigned agent will be notified, informing them of the lead's request to delete their account and reminding them to manually erase the lead to meet the lead's requirements. 

Lofty will not directly erase leads. It is your responsibility to fully comply with the deletion request.

How will I know if my lead has made a request?

All Data Subject Access Requests will be logged on the lead's timeline. You will also receive an email notification if action is required by you, such as a deletion request.

Questions?

If you have any questions regarding this topic or any others, please contact our Support Team via email at <support@lofty.com>, by phone at 1 (855) 981-7557, or by chat with us through your Lofty CRM