r/imvu

Whimsical fairy 🧚

Pink pink and more pink 💖

Let me just start by saying that my country's data protection law is closely modeled after the GDPR, meaning I have the legal right to request a copy of my personal information from data controllers like IMVU even if their company is not in my country.

A bit of context on the issue, I asked for the billing address used on two older orders because I remember there was an AVS mismatch at the time. It took me days to figure out with much trial and error, but I forgot what I did to make it work, all I remember is that the address didn't match my bank statement. My now ex bank couldn't help, so they referred me back to IMVU because the AVS is on their side, so I made a Subject Access Request for a copy of the billing address, provided the 4 last digits of the card, and my ID.

For about 20 days, they kept treating it as a normal billing issue and ignored the actual request. I kept repeating that I wasn't asking them to fix a payment, I just wanted a copy of the address they already have stored. Only after I mentioned the 30 day deadline and said I would escalate it to my data protection authority if it continued to be ignored did they finally address it... by saying they couldn’t give me the information.

When I asked for additional information on why they couldn't, they said it was for security reasons, which I told them was too vague and that the law requires them to cite a specific legal exemption... which they responded by repeated the same answer. I then asked a simpler question, which was just to confirm the last four digits of the card used on those two orders - I provided them the last 4 digits of both cards I owned at the time and only asked to verify whether it was one or the other, thinking 'they request this data when handling billing issues, surely they can just verify whether I remember something wrong, maybe I didn't even use this card to begin with?'

And this image you are currently seeing is the reply I got...

At this point I asked them to confirm whether this is IMVU's final decision, and said they can close the ticket if it is. If they stand by this response, I intend on sending the whole conversation to my data protection authority as a formal complaint for them to review.

What does everyone else think - since my country's laws are basically a mirroring of the GDPR, how has IMVU's support handled my request?

I've been having TOOOOO MUCH FUN creating lately ngl!

What do you think?

Shop is Chikisbaby ♡•♡•♡

I can hardly sleep with all this paranoia

made sum chains !! https://www.imvu.com/shop/web\_search.php?manufacturers\_id=182324999 < my shop muah ty !!