Under certain circumstances, by law you have the right to:
- Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal data (commonly known as a “right to be forgotten”). This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground and provided that we do not have compelling legitimate interests to override such objection.
- Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
- Request the transfer of your personal data to another party.
- Portability of your personal data. This enables you to receive some of your personal data in machine readable format. This right extends to you being able to request that such data is sent to a third-party controller.
- Complain to a relevant supervisory authority in respect of our processing of your personal data, which will be the Information Commissioner’s Office in the UK. However, if you have any concerns about how we handle your personal data, we encourage you to contact us in the first instance so that we can work with you to resolve them.
You can contact us to find out more or to ask any questions you may have about our use of your personal data.
If you want to review, verify, correct, request erasure of your personal data, object to the processing of your personal data, or request that we transfer a copy of your personal data to another party, please contact us in writing.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
Please be aware that the rights above are not absolute and there may be circumstances where we are unable to comply with your request (either wholly or in part). In such cases we will explain why we cannot comply with the request.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.