1. Why this page exists
The Privacy Policy explains what we do with personal data. This page is the short version of what you can make us do about it. Which rights apply depends on where you live — the list below follows the EU General Data Protection Regulation, and we extend the same handling to customers elsewhere rather than maintaining two standards.
2. The rights
- Access. Ask what personal data we hold about you and receive a copy.
- Rectification. Have inaccurate data corrected and incomplete data completed.
- Erasure. Ask us to delete your data. We delete what we are not legally required to keep and tell you plainly what remains and why — order records tied to accounting duties are the usual exception. Periods are in the Data Retention Policy.
- Restriction. Ask us to stop processing while a dispute about accuracy or lawfulness is resolved.
- Objection. Object to processing based on our legitimate interests. Where you object to direct marketing, we stop, with no balancing test.
- Portability. Receive the data you gave us in a structured, machine-readable format, and have it sent to another controller where technically feasible.
- Withdraw consent. Where processing rests on consent — marketing email, optional analytics cookies — withdraw it at any time. Withdrawal does not undo processing that was lawful before it.
- Not be subject to automated decisions. We do not make decisions with legal or similarly significant effects about you by automated means alone.
3. How to exercise them
Send the request through the Contact page from the email address on the account, saying which right you are exercising. We do not require a specific form or wording.
We may ask for information that confirms the request comes from you — never a password, never a copy of an identity document unless the law obliges us and no lighter alternative exists.
4. How long we take
We reply within one month. If the request is complex or you have made several, we may extend by two further months and will tell you why inside the first month. There is no charge, unless a request is manifestly unfounded or repetitive, in which case we say so rather than quietly ignoring it.
5. If you are not satisfied
Tell us first — most problems are a misunderstanding about what data exists. If that does not resolve it, you may complain to the data-protection authority where you live, work, or where you believe the issue occurred. Complaining to an authority does not remove any other legal remedy.
6. Data we cannot act on
We never receive your social-media password, and we hold no data inside the platforms themselves. A request to delete a follower, a like or a comment from your account has to go to that platform — we can only act on the order record held here.