Your Data Subject Rights (UK GDPR)
Under UK data protection law, you have several rights regarding your personal data. We are committed to upholding these rights.
1. Right of Access (Subject Access Request - SAR)
You have the right to request a copy of the personal data we hold about you, along with information on how and why we use it.
When you submit a Subject Access Request (SAR) through our Compliance page, our compliance provider, Consentmo, processes your IP address and email solely to fulfill your request. For more details, see Consentmo’s Data Processing Policy.
Access to Personal Data You can use the link below to request a report which will contain all personal information that we store for you. We will respond within one calendar month (or provide an update if an extension is required).
2. Right to Rectification (Data Accuracy)
If you believe that any data we hold about you is inaccurate or incomplete, you have the right to have it corrected.
Data Rectification If your account data is inaccurate, update or correct it using the link below.
3. Right to Portability (Data Portability)
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where the processing is based on consent or contract, and is carried out by automated means.
Data Portability You can use the links below to download all the data we store and use for a better experience in our store.
4. Right to Erasure (Right to be Forgotten)
You have the right to request the deletion or removal of your personal data where there is no compelling reason for its continued processing.
Right to be Forgotten Use this option if you want to remove your personal and other data from our store. Keep in mind that this process will delete your account, so you will no longer be able to access or use it anymore.
5. Right to Restrict Processing
You have the right to 'block' or suppress the processing of your personal data in certain circumstances, such as while the accuracy of your personal data is being verified.
6. Right to Object
You have the right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the absolute right to object to the processing of your personal data for direct marketing purposes.
7. Automated Decision-Making and Profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless it is necessary for entering into or performing a contract, is authorised by law, or is based on your explicit consent.
Note on "Do not Sell My Personal Information":
The concept of a specific "Do not Sell My Personal Information" right is primarily a feature of US state privacy laws (like CCPA/CPRA). While the UK GDPR gives individuals the right to object to processing for direct marketing (Right to Object) and the right to restrict processing, the concept of a broad "sale" of data is typically covered by the requirement for a lawful basis and transparency. If you share data with third parties for their own purposes, you must identify your lawful basis (e.g., legitimate interest or consent) and inform the data subject, who can then exercise their right to object.
Note on "Authorized Agent":
In the UK, an individual may make a request through a third party (similar to an Authorized Agent). If a request is made by a third party on behalf of the individual, we will require written confirmation that the third party is acting on their behalf and we may take steps to verify the individual's identity directly to ensure the security of their personal data.