Privacy Choices & Consumer Rights Notice

This Notice describes how to exercise privacy choices and consumer rights. Statutory rights depend on your residence, D.O.X Capital's role, applicable thresholds and exemptions, the data, the purpose, and the transaction.

1. How to submit a request

Submit a request by emailing admin@thedoxs.com. You do not need to create an account to submit a request where law requires open intake. Provide your name or contact information, the request type, your state or country of residence, your relationship to D.O.X Capital, and enough information to locate your records. Do not send passwords or unnecessary sensitive documents.

2. Potential rights

Depending on applicable law, your rights may include confirmation of processing; access or knowledge; correction; deletion; portability; withdrawal of consent; restriction; objection; opting out of sale, sharing, targeted advertising, or qualifying profiling or automated decision-making; limiting the use of sensitive data; and appeal. Our response will state whether a right is statutory, voluntarily extended, or unavailable and why.

3. Authentication

We use risk-proportionate verification based on the request type and data sensitivity. We may match existing information, confirm control of an email or account, or request other reasonable proof. We will not ask for an account password. If we cannot verify identity, we will explain what additional information is reasonably needed or how the request can be narrowed.

4. Authorized agents

Where law permits, an authorized agent may submit a request with evidence of authority. We may verify you directly or request a valid power of attorney as applicable. A device-level opt-out signal does not require identity verification when the law requires action without it.

5. Parents and guardians

A request involving a minor follows the Age Eligibility & Minors Policy. We verify adult identity, relationship, and authority proportionately and avoid collecting more information than necessary.

6. Sale, sharing, advertising, and profiling

D.O.X Capital does not sell personal information for money and does not share it for cross-context behavioral advertising. If a covered activity begins, our Privacy Policy and point-of-collection notices will describe it and provide any required opt-out. We do not label an ordinary service-provider transfer a "non-sale" without analyzing the statutory definition and our contracts.

7. Universal opt-out mechanisms

Where required, we process a legally valid universal opt-out preference signal, including a recognized Global Privacy Control signal, within the jurisdiction's required browser, device, account, or profile scope. A preference center will not reverse a valid signal without a clear, valid later choice.

8. Sensitive information and consent

Where consent is required for sensitive-data processing, we request it separately and specifically, identify the categories and purposes, and provide a withdrawal method. A general Terms checkbox is not substituted for a legally required sensitive-data consent.

9. Timing, extensions, and response

Acknowledgment, response, and extension periods are calculated from the rules of your applicable jurisdiction, not from one universal deadline. We will confirm receipt, state any verification needs, provide the response securely, and explain any lawful extension. If we deny or limit a request, we will identify the reason and any available appeal.

10. Appeals

If applicable law provides an appeal right, you may appeal a decision by replying to our response or emailing admin@thedoxs.com. Where practicable, a person not involved in the initial decision will review it, and the appeal response will include any required route to the relevant attorney general or regulator.

11. Exceptions

Rights may be limited by identity verification, legal privilege, security, fraud prevention, another person's rights, recordkeeping duties, a litigation hold, completion of a requested transaction, or another statutory exception. We apply exceptions narrowly and document the legal basis; we do not use them as a blanket refusal.

12. Non-discrimination

We will not unlawfully discriminate against you for exercising privacy rights, and we do not use dark patterns or asymmetrical choices to defeat a request. Any permitted loyalty or incentive program requires separate disclosure and is reasonably related to the value of the data where law requires.

13. Request records

We retain a case record sufficient to demonstrate receipt, verification, searches, system and vendor tasks, exceptions, response, appeal, and completion under the applicable schedule. Verification artifacts are retained for a shorter period where possible, and the request record is protected with logged access.

Contact

For privacy choices, requests, appeals, or authorized-agent submissions, contact D.O.X Capital at admin@thedoxs.com. Do not use a support channel for emergencies.