You have rights over your personal data. Under data protection law:
- we have to inform you about the collection and use of your personal data, including our purposes for processing your personal data, how long we will keep your data and who we will share your data with (known as the right to be informed);
- you can ask whether we are processing your personal data and if so, ask for a copy of your information (known as the right of access);
- you can ask for information to be corrected (known as the right to rectification);
- you can ask for information to be erased or deleted (known as the right of erasure);
- you can ask for us to limit or restrict processing (known as the right to restrict processing);
- you can ask us to send you a copy in a structured digital format or ask for us to send it to another party (known as the right to data portability);
- you can object to us processing your data, in particular where we use the data for direct marketing, including profiling for direct marketing purposes. The right to object does not apply if we must process the data to meet a contractual or legal requirement (known as the right to object);
- you have the right not to be subject to a potentially damaging decision being taken without human intervention (known as rights related to automated decision making and profiling).
Some rights, however, may be limited. We may be obliged by law or regulation to keep information. We must respect other people’s privacy as well, which means we may need to redact or remove information where it includes personal data about someone else, even if it is connected to your data. On occasion there may be a compelling legitimate interest to keep processing data.
If you want a copy of your data, to object to how we use your data, or ask us to delete it or restrict how we use it or, please see ‘Getting in touch’ below.
You also have a right to complain to an EU data protection authority. This can be where you live, work or where the matter occurred. In the UK, the authority is the Information Commissioner’s Office, please see ‘Contacting the regulator’ below