Your Data Rights

Rights you can exercise

• Access (Art. 15) — receive a copy of all personal data we hold about you, plus the categories, purposes, recipients, and retention periods.
• Rectification (Art. 16) — correct any inaccurate data.
• Erasure (Art. 17, "right to be forgotten") — delete your data, subject to legal retention requirements (e.g. tax records, security incidents).
• Restriction (Art. 18) — limit our processing to storage only.
• Portability (Art. 20) — export your data in a structured, machine-readable format.
• Objection (Art. 21) — object to processing based on legitimate interests.
• Withdraw consent — where consent is our legal basis.

How to file a request

Use the form below. We acknowledge within one business day and respond within one calendar month (extendable to three for complex requests; we will tell you in advance). The DUAA 2025 "stop the clock" rule pauses the deadline if we need to verify your identity.

The request form is rendered separately on this page. The full UK / EU complaint channel is the Information Commissioner's Office at ico.org.uk/make-a-complaint.