Under certain circumstances, by law you have the right to:
- Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal data (commonly known as a “right to be forgotten”). This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
- Object to processing of your personal data where we are relying on a legitimate interest you want to object to processing on this ground and provided that we do not have compelling legitimate interests to override such objection.
- Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you.
- Request the transfer of your personal data to another party.
- Complain to a relevant supervisory authority in respect of our processing of your personal data, which will be the Information Commissioner’s Office in the UK. However, if you have any concerns about how we handle your personal data, we encourage you to contact us in the first instance so that we can work with you to resolve them.
If you want to review, verify, correct, request erasure of your personal data, object to the processing of your personal data, or request that we transfer a copy of your personal data to another party, please contact us in writing.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
Please be aware that the rights above are not absolute and there may be circumstances where we are unable to comply with your request (either wholly or in part). In such cases we will explain why we cannot comply with the request.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
RIGHT TO WITHDRAW CONSENT
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another lawful basis for doing so, which we will inform you of when responding to you. Please note, however, that in most cases we do not rely on your consent to process your personal data.
