Legal / Data rights
GDPR and your data rights
Practical instructions for exercising your rights over any personal data we hold — and what to do if you are not satisfied with our answer.
Last reviewed: Placeholder — set when this policy is first formally approved
Rights you can exercise
- Access — a copy of the personal data we hold about you.
- Rectification — correction of inaccurate or incomplete data.
- Erasure — deletion where we have no overriding lawful reason to keep it.
- Restriction — pause processing while a dispute is resolved.
- Portability — receive data you gave us in a machine-readable form.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — at any time, via the cookie preferences, without affecting processing already carried out.
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
How to make a request
Send your request through the contact page or to [PLACEHOLDER — privacy email to be supplied]. Tell us which right you are exercising and enough detail to locate your data. We respond within one month and will tell you if we need longer for a complex request. We may ask for proportionate confirmation of identity — never financial credentials.
Complaints
If you are unhappy with our response, you can complain to your local data protection authority. In the EU that is your national supervisory authority; in the UK it is the Information Commissioner's Office. Supervisory authority for our establishment: [PLACEHOLDER — lead authority to be supplied once the entity is registered].
Other regions
Residents of jurisdictions with comparable laws — including UK GDPR, California's CCPA/CPRA and similar frameworks — may exercise the equivalent rights through the same channel. We do not sell or share personal information for cross-context behavioural advertising.