Your GDPR rights

• Right of access (Art. 15). Get a copy of the personal data we hold about you, plus information on how we use it.
• Right to rectification (Art. 16). Have inaccurate or incomplete data corrected.
• Right to erasure (Art. 17). Have your data deleted (the “right to be forgotten”).
• Right to restriction (Art. 18). Have us pause processing while a question about accuracy or lawful basis is being resolved.
• Right to data portability (Art. 20). Receive the data you have given us in a structured, commonly used and machine-readable format (JSON), or have us transmit it to another controller where technically feasible.
• Right to object (Art. 21). Object to processing based on legitimate interest.
• Right against automated decision-making (Art. 22). Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make such decisions about you.
• Right to lodge a complaint (Art. 77). Complain to your national data-protection authority.

Send your request via the contact page. Include enough information for us to identify your account (typically the email address you signed up with). We may ask follow-up questions to verify your identity before acting — this protects your data from being released to the wrong person.

Typical formats:

• Access & portability: “Please send me a copy of all personal data you hold about my account ‹email›.”
• Rectification: “The ‹field› on my account is wrong; please correct it to ‹value›.”
• Erasure: “Please delete my account ‹email› and all associated personal data.”
• Restriction: “Please stop processing my data while I dispute ‹issue›.”
• Objection: “I object to the processing of ‹data category› under your legitimate-interest basis because ‹reason›.”

Under Article 12(3) GDPR we must respond to your request within one month of receiving it. In exceptional cases involving complex or numerous requests we may extend the response period by a further two months — we will tell you within the first month if we need an extension, and why.

Acting on the request is free of charge. We may charge a reasonable administrative fee only if a request is manifestly unfounded or excessive (for example, repetitive identical requests), as Article 12(5) GDPR allows.

If you believe our processing of your personal data breaches the GDPR you have the right to lodge a complaint with the supervisory authority in the EU/EEA member state where you live, where you work, or where the alleged infringement took place.

The European Data Protection Board maintains an up-to-date list of national authorities: edpb.europa.eu/about-edpb/about-edpb/members_en.

Our lead supervisory authority will be confirmed here once the operator is incorporated. Until then you may lodge a complaint with your national data-protection authority.

The data categories we collect, the lawful bases we rely on, and our retention periods are documented in the privacy policy. Cookies and similar identifiers are covered on the cookies page.