Your GDPR Rights

1. Right to Be Informed

You have the right to be informed about the collection and use of your personal data. We provide this information through our Privacy Policy, which details:

• What data we collect
• Why we collect it
• How we use it
• Who we share it with
• How long we keep it

2. Right of Access (Subject Access Request)

You have the right to request a copy of the personal data we hold about you. This is commonly known as a "Subject Access Request" (SAR).

What we will provide:

• Confirmation that we process your personal data
• A copy of your personal data
• Information about how we use your data
• Categories of data we hold
• Recipients of your data
• Retention period for your data

Response time: We will respond within 30 days of receiving your request.

3. Right to Rectification

You have the right to have inaccurate or incomplete personal data corrected. If you believe any information we hold about you is incorrect or incomplete, please contact us and we will update it promptly.

4. Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent (where consent was the basis for processing)
• You object to processing and there are no overriding legitimate grounds
• The data was unlawfully processed
• The data must be erased to comply with a legal obligation

Note: This right is not absolute. We may be required to retain certain data for legal, accounting, or other legitimate purposes.

5. Right to Restrict Processing

You have the right to request that we restrict how we use your data in certain circumstances:

• You contest the accuracy of the data
• Processing is unlawful, but you don't want the data erased
• We no longer need the data, but you need it for legal claims
• You have objected to processing pending verification of legitimate grounds

When processing is restricted, we can store the data but not use it without your consent or for limited purposes.

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another organization.

This right applies when: (a) processing is based on consent or contract, and (b) processing is carried out by automated means.

7. Right to Object

You have the right to object to processing of your personal data in certain circumstances:

• Direct marketing: You can object at any time to processing for direct marketing purposes (absolute right)
• Legitimate interests: You can object to processing based on legitimate interests or performance of a task in the public interest

When you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

8. Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects. We do not currently use fully automated decision-making processes that would have legal or significant effects on you.