Toast’s Virginia Consumer Data Protection Act Compliance Efforts

In this Article:

• Virginia Consumer Data Protection Act (VCDPA) Overview
• Before Contacting Toast (VCDPA)
• After Contacting Toast (VCDPA)

Virginia Consumer Data Protection Act (VCDPA) Overview

In certain instances, Toast will be able to assist our customers with various aspects of their Virginia Consumer Data Protection Act (VCDPA) compliance efforts in relation to the fulfillment of individual rights. If you need to learn more about the VCDPA – a Virginia data protection law- check out our article Overview of the Virginia Consumer Data Protection Act and How It May Impact Your Business.
 

Before Contacting Toast (VCDPA)

After you have received an individual rights request, but before reaching out to Toast, you need to complete the following steps: 

• Confirm receipt and verify the identity of the individual making the request
• Confirm whether the request itself is a valid individual rights request (e.g. not subject to an exemption) under the VCDPA
• Determine the appropriate scope of the request
• Confirm that the request itself is relevant to Toast and that Toast collects, maintains, or uses the information forming part of the request

Once those elements are confirmed, requests can be submitted to Toast’s Privacy Office via a form within a privacy compliance dashboard located in the back-end of Toast. For instructions on how to access and submit these requests via the privacy dashboard, please review . Alternatively, please contact us at .

Your message should include

• The nature of the request (e.g., access, erasure, restriction etc.) in the subject line of the email
• The name, email, phone number, or other relevant details of the requestor (as applicable) to enable us to search our records and support the fulfillment of the request

After Contacting Toast (VCDPA)

Once we receive your message, Toast will provide the following support in addition to verification support or to confirm what data is being processed by Toast:

• For access requests, Toast will scan our systems to determine if we hold information about the individual. Please provide the name, email, phone number, and other relevant details of the request (as applicable) to enable us to perform the search. To the extent any information is found within Toast or within any service provider systems, Toast or the relevant service provider will provide you with the requested information in a reasonable and timely manner.   
• For deletion requests, Toast will support the fulfillment of the deletion request by removing the relevant personal information held by Toast as part of the request. To the extent applicable, Toast may also notify other third-party service providers that support Toast with the processing activities. Once the above activities are completed, Toast will respond to you and verify that the requested information has been deleted and that the appropriate third parties have been notified.   
• If additional rights beyond access and/or deletion are invoked by an individual and submitted to you, Toast will work with you to address the request to the extent applicable to instances where Toast processes personal data related to the request. For these additional requests, please provide the name, email, phone number, and other relevant details of the request (as applicable).

Please note that it is your responsibility to verify the appropriateness of the individual rights request and to determine the applicable scope. Please review the VCDPA for additional information on the applicable requirements or consult your independent legal counsel for additional guidance generally or in relation to the fulfillment of any individual rights.
 

Toast’s support will only cover instances where Toast processes personal information relevant to the request. If for any reason Toast is unable to provide support or fulfill aspects of the individual rights requests above, we will communicate that to you along with our rationale for why the request cannot be fulfilled from the Toast side.
 

Requests for assistance may be sent to .