U.S. STATE PRIVACY RIGHTS ‑ LUMEN

RIGHT to KNOW/ACCESS:

As part of our commitment to protecting your privacy and ensuring transparency, Lumen acknowledges your right to know about and access the personal information that we collect and process about you. This provision outlines your rights and the procedures you can follow to exercise those rights:

Access to Personal Information

You have the right to know how Lumen has collected, used and/or sold or shared your personal information over the preceding 12 months, and to request access to the personal information held by Lumen.

How to Request Access

To exercise your right of access, you can go to our Data Subject Request Form or send a request to our Data Protection Office at DPO@lumen.com.

The request should include your name, contact information, and any specific details regarding the information you are requesting. We may require additional information to verify your identity and ensure the security of your personal information.

In most cases, access to your personal information will be provided free of charge. However, if your request is manifestly unfounded, excessive, or repetitive within the same 12‑month period, we reserve the right to charge a reasonable fee based on administrative costs. We will inform you of any applicable fees before proceeding with your request.

Response and Timescale

We will acknowledge your request within 10 days. We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑ day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timescale for fulfilling your request. Please note responses will come from Lumen.com.

Exceptions and Limitations

Please note that there may be circumstances where we are unable to grant you access to certain information, including but not limited to situations where the disclosure of such information would infringe upon the rights of others, violate applicable laws, compromise the security and confidentiality of proprietary information, or where we are unable to authenticate the request. In such cases, we will provide you with an explanation for the denial of access and explain any process available to appeal the decision.

RIGHT to CORRECT:

We understand the importance of maintaining accurate and up‑to‑date personal information.

Request to Correct

You have the right to correct inaccuracies in your personal information considering the nature of the personal information and the purposes of the processing of the personal information.

Notice

If we have corrected your personal information following a request, we will communicate the changes to any relevant third parties, where applicable and required by law.

Timescale

We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timescale for fulfilling your request.

RIGHT to DELETION:

We recognise your right to request the deletion of your personal information under applicable privacy laws.

Request to Delete

You have the right to request that we delete personal information about you that has been stored and collected by Lumen.

Timescale

We will aim to comply with your request within 45 days of receiving your request. Depending on the complexity and scope of your request, we may need to extend this 45‑day period. If so, we will notify you via the contact information you have provided, explaining the reason for the delay and the expected timescale for fulfilling your request.

Exceptions to Deletion

While we strive to accommodate all deletion requests, certain exceptions may apply under applicable laws, including but not limited to situations where retention of the personal information is necessary to comply with legal obligations; to exercise our right to freedom of expression; to detect, investigate, or prevent security incidents or fraudulent activities; or to protect the rights, privacy, or safety of ourselves, our users, or others.

RIGHTS OVER SENSITIVE PERSONAL INFORMATION:

We respect your right to limit the processing of your sensitive personal information under applicable privacy laws.

Rights over Sensitive Personal Information

You have the right to limit the use and disclosure of your sensitive personal information. You can exercise this right by following this Data Subject Request Form. If you exercise this right, we will not use or disclose your sensitive personal information for any purpose other than those necessary to provide our services.

RIGHT to OPT‑OUT:

We respect your right to control and manage how your personal information is used, and we provide you with the opportunity to opt out of certain data processing activities.

Opt‑out

You have the right to opt out of targeted advertising and the sale of personal data information. Lumen doesn’t sell personally identifiable information. You may opt‑out of one or more of these purposes by accessing this link.

RIGHT to DATA PORTABILITY:

Portability

If you wish to exercise your right to data portability, you may request a copy of your personal data that we hold in a commonly used and machine-readable format. This enables you to securely transmit the data to another organisation of your choice, or, if technically feasible, we may transmit it directly upon your request.

Notice

To initiate a data portability request, please contact us at DPO@lumen.com or access our Data Subject Request Form. We may require additional verification of your identity to ensure the security of your personal data.

NON‑DISCRIMINATION/RETALIATION:

Non‑discrimination

We will not discriminate against you for exercising your privacy rights, as outlined in this privacy notice, and as provided by applicable laws. This includes, but is not limited to denying you goods, services, or benefits; charging different prices or rates for goods or services or imposing unreasonable conditions, based on your exercise of privacy rights. If you believe that you have been subjected to discrimination or retaliation in violation of your privacy rights, we encourage you to promptly report your concerns to DPO@lumen.com.

Limitation

However, none of the rights and options provided in this privacy notice shall prohibit us from charging a consumer a different price or rate, or from providing a different level or quality of goods or services to the consumer, if that difference is reasonably related to the value provided to our business by the consumer's data.

RIGHT to APPEAL:

Appeal

If we have not responded to your request within the specified time period, we will inform you of the reasons for not taking action and any rights you may have to appeal our decision