Last updated 2026-05-16

UK GDPR rights

A plain-English summary of your data rights under the UK GDPR and Data Protection Act 2018. For the full detail on what we collect and why, read the privacy policy.

Your eight rights

1. Be informed

Know what we collect, why, how long we keep it, and who we share it with. Our privacy policy covers this.

2. Access

Get a copy of the personal data we hold about you. Free of charge, within 30 days.

3. Rectification

Correct anything inaccurate or incomplete. Usually within a week.

4. Erasure

Ask us to delete your data — the “right to be forgotten”. Subject to legal retention rules.

5. Restrict processing

Tell us to pause processing while a dispute is resolved.

6. Data portability

Receive your data in a portable format (JSON or CSV) to move elsewhere.

7. Object

Object to processing for direct marketing or legitimate-interest grounds.

8. Automated decisions

Not be subject to a decision made entirely by AI without human review. Ours always has a human escalation path.

Our response SLAs

30 daysStatutory maximum for any rights request

7 daysTypical turnaround for access & rectification

48 hrsAcknowledgement of every request received

72 hrsPersonal-data breach notification to the ICO

How to exercise a right

Email [email protected] with “GDPR” in the subject and tell us which right you want to exercise. We may ask for proof of identity before releasing personal data — this protects you, not us.

Prefer to call? Ring 0207 252 3333 — an AI agent will take the request, log it, and route it to a human for sign-off. AI is always disclosed at first contact.

If you're not happy

You can complain directly to the UK regulator, the Information Commissioner's Office (ICO):

Web: ico.org.uk/make-a-complaint
Phone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We'd rather hear from you first — most issues are misunderstandings we can fix in a phone call.

AI & automated processing

AI agents handle a large share of incoming interactions on our site and on behalf of pilot clients. Every interaction is logged and auditable. A human reviews any decision that materially affects you, and you can always request human escalation at the start of any conversation.

Data Protection contact

Until we appoint a formal Data Protection Officer, GDPR requests go to [email protected] — routed and tracked by our CLOSER agent with human sign-off.