Rights at a glance

RightWhat it means in practiceTypical response time
AccessReceive a summary of information held about your requestWithin 30 days of acknowledgement
CorrectionUpdate inaccurate contact details on fileWithin 14 days where details are straightforward
DeletionRemove correspondence once it is no longer neededWithin 30 days, subject to backup rotation
RestrictionPause processing while accuracy is reviewedApplied from the date of acknowledgement
ObjectionOpt out of optional analytics-related processingApplied within 7 days of a verified request

What to include in a request

  • The email address or contact method originally used, so we can locate the relevant message.
  • A short, specific description of which right you wish to exercise.
  • Any supporting detail that helps us verify the request without asking for unnecessary personal information.
  • A preferred reply address if it differs from the one used in the original message.

A note on scope

"A data rights request works best when it is specific. The more precisely a reader describes what they are asking for, the faster we can respond."

If a request is unclear, our usual practice is to ask one clarifying question before beginning the review, rather than guessing at intent.

Read the full privacy policy