As a data subject, you have a number of rights in relation to your personal information under data protection law. In relation to certain rights, we may ask you for information to confirm your identity and, where applicable, to help us to search for your personal information. Except in rare cases, we will respond to you within 30 days after we have received this information or, where no such information is required, after we have received your request.
10.1 Accessing your personal information
You have the right to ask for a copy of the information that we hold about you, along with information on what personal information we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making.
You can make a request for access free of charge by emailing or writing to us at the address set out in Section 13 of this policy. We may not provide you with a copy of your personal information if this concerns other individuals or we have another lawful reason to withhold that information.
10.2 Correcting and updating your personal information
The accuracy of your information is important to us and we will endeavour to make it easy and simple for you to review and correct the information that we hold about you. If you change your name or address/email address/contact numbers, or you find out that any of the other information we hold is inaccurate, incomplete or out of date, please let us know by contacting us using any of the methods detailed in Section 13 of this policy.
10.3 Withdrawing your consent
Where we rely on your consent as the legal basis for processing your personal information, as set out in Section 4 (How we use your personal information), you may withdraw your consent at any time by contacting us using the details at the end of this policy or by clicking the "unsubscribe" link in any marketing emails which you receive.
If you withdraw your consent, our use of your personal information before you withdraw is still lawful.
10.4 Objecting to our use of your personal information
Where we rely on our legitimate business interests as the legal basis for processing your personal information for any purpose(s), as out in Section 4 (How we use your personal information), you may object to us using your personal information for these purposes by emailing or writing to us at the address at the end of this policy. Except for the purposes for which we are sure we can continue to process your personal information, we will temporarily stop processing your personal information in line with your objection until we have investigated the matter. If we agree that your objection is justified in accordance with your rights under data protection laws, we will permanently stop using your data for those purposes. Otherwise we will provide you with our justification as to why we need to continue using your data. You may object to us using your personal information for direct marketing purposes and we will automatically comply with your request.
10.5 Erasing your personal information or restricting its processing
In certain circumstances, you may ask for your personal information to be removed from our systems by emailing or writing to us at the address set out in Section 13 of this policy. Unless there is a reason that the law allows us to use your personal information for longer, we will make reasonable efforts to comply with your request.
You may also ask us to restrict processing your personal information in the following situations:
- where you believe it is unlawful for us to do so,
- you have objected to its use and our investigation is pending or you require us to keep it in connection with legal proceedings.
In these situations, we may only process your personal information whilst its processing is restricted if we have your consent or are legally permitted to do so, for example for storage purposes, to protect the rights of another individual or company or in connection with legal proceedings.
10.6 Transferring your personal information in a structured data file
Where we rely on your consent as the legal basis for processing your personal information or need to process it in connection with your contract, as set out in Section 4 (How we use your personal information), you may ask us to provide you with a copy of that information in a structured data file.
We will provide this to you electronically in a structured, commonly used and machine readable form, such as a CSV file.
You can ask us to send your personal information directly to another service provider, and we will do so if this is technically possible. We may not provide you with a copy of your personal information if this concerns other individuals or we have another lawful reason to withhold that information.
10.7 Make a complaint
You can make a complaint about how we have used your personal information to us by contacting us as noted in Section 13 below, or to a supervisory authority – for the UK this is the Information Commissioner's Office, at https://ico.org.uk/.