Information about your data protection rights under the General Data Protection Regulation
As an individual whose personal data we process, you are entitled to specific rights under the General Data Protection Regulation. We are committed to facilitating the exercise of these rights in accordance with applicable law.
You have the right to request confirmation of whether we process your personal data and to obtain access to that data. Upon request, we will provide you with a copy of the personal information we hold about you and details about how it is processed.
If you believe that personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that data. We will respond to such requests within the timeframes specified by GDPR.
Under certain circumstances, you may request deletion of your personal data from our systems. This right applies when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when processing is unlawful.
Please note that we may retain certain information where we have a legitimate interest or legal obligation to do so, such as for accounting purposes or to defend against legal claims.
You have the right to request restriction of processing of your personal data in specific situations, such as when you contest the accuracy of the data or when processing is unlawful but you prefer restriction over erasure.
Where processing is based on your consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
For questions related to data protection or to exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request".
You have the right to lodge a complaint with a supervisory authority, particularly in the member state of your habitual residence, place of work, or place of alleged infringement, if you believe our processing of your personal data violates GDPR.
We process personal data on the following legal bases:
Your personal data is processed and stored within the United Kingdom. We do not transfer personal data outside the UK or European Economic Area unless necessary for service delivery and with appropriate safeguards in place.
We will respond to requests to exercise GDPR rights within one month of receipt. In complex cases, this period may be extended by two additional months, and we will inform you of any such extension within the initial one-month period.