Last updated: August 2026
Your Data Protection Rights
Under the General Data Protection Regulation and UK data protection law, you have specific rights regarding your personal data. This page explains those rights and how to exercise them.
Right to Be Informed
You have the right to clear, transparent information about how we collect and use your personal data. This information is provided in our Privacy Policy and throughout our website when we collect data from you.
Right of Access
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request. We will provide this information free of charge within one month of receiving your request, unless the request is complex or numerous, in which case we may extend this period by two further months.
To make a Subject Access Request, please email [email protected] with sufficient information to identify you and the data you are requesting.
Right to Rectification
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will respond to rectification requests within one month and will inform any third parties with whom we have shared your data about the correction.
Right to Erasure
Also known as the "right to be forgotten," this allows you to request deletion of your personal data in certain circumstances, including:
- The data is no longer necessary for the purpose it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
- The data must be erased for compliance with legal obligations
This right is not absolute and may be limited by legal requirements to retain certain data.
Right to Restrict Processing
You can request that we restrict how we use your personal data in certain situations, such as:
- When you contest the accuracy of the data
- When processing is unlawful but you do not want the data erased
- When we no longer need the data but you need it for legal claims
- When you have objected to processing pending verification of our legitimate grounds
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. This right applies when:
- Processing is based on consent or contract
- Processing is carried out by automated means
Right to Object
You have the right to object to processing of your personal data in certain circumstances:
- Processing based on legitimate interests or public interest
- Direct marketing (including profiling)
- Processing for scientific or historical research purposes
We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you. We do not currently use automated decision-making systems that would trigger this right.
Right to Withdraw Consent
Where we process your data based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
Email: [email protected]
Address: 27 Charlotte Square, Edinburgh, EH2 4ET, United Kingdom
We will respond to all requests within one month, though complex requests may take up to three months. We will inform you if we need additional time.
Identity Verification
To protect your privacy, we may need to verify your identity before responding to requests concerning your personal data. This may involve requesting additional information to confirm you are the person to whom the data relates.
Right to Complain
If you are unhappy with how we have handled your personal data or your request to exercise your rights, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Data Controller
The data controller responsible for your personal data is:
cagioattos
27 Charlotte Square
Edinburgh, EH2 4ET
United Kingdom
Email: [email protected]