GDPR Art. 15 – 21

Exercise your data rights

Under the GDPR you have the right to access, erase, rectify, restrict, port, or object to the processing of your personal data (Art 15–21). Submit the form below — we'll send a verification link and respond within one month of receipt of your verified request (GDPR Art 12(3)).

Your email

What would you like to do?

Access — send me a copy of my data (GDPR Art 15)Erasure — delete my data (GDPR Art 17)Rectification — correct inaccurate data about me (GDPR Art 16)Restriction — restrict processing of my data (GDPR Art 18)Portability — receive my data in a machine-readable format (GDPR Art 20)Objection — object to processing of my data (GDPR Art 21)

I confirm this is my email address and I am requesting my own data.

Why we keep some records

We keep a record of the request and our response to prove we honoured it (required by GDPR Art 5(2) and 12(3)). Everything else is deleted on erasure.

We retain DSAR records (the request and our response) as part of our compliance audit trail to demonstrate compliance with GDPR Art 5(2) and Art 12(3) — this falls under the Art 17(3)(b) legal-obligation exception to erasure. All other personal data is deleted on erasure (except billing records covered by Swedish bookkeeping law and sub-processor logs which retain for legally-mandated periods per our DPA). Admin audit logs separately have a 3-year retention enforced in code.