Back to Privacy Policy
9. Your legal rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data.
Right to Access
Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Right to Erasure
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. Note that we may not always be able to comply with your request for specific legal reasons.
Right to Restrict Processing
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in certain scenarios such as if you want us to establish the data's accuracy or where our use of the data is unlawful.
Right to Withdraw Consent
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
Right to Rectification
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Right to Object
Object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing as you feel it impacts on your fundamental rights and freedoms.
Right to Data Portability
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.
How to Exercise Your Rights
If you wish to exercise any of the rights set out above, please contact us using the contact details provided in section 1.
No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
For data access requests, we can provide information about what personal data we hold about you and how it is processed, in commonly used electronic formats where technically feasible.
