Any of the personal Data we hold is managed in accordance with the General Data Protection Regulations which enshrines the following rights for you in law:

• Right to be informed — the right to know what is happening with your personal data, this document serves to fulfill that right for you.
• The right to access your personal data. 
• The right to rectification
• The right to erasure — you have the right to request that we delete any personal data we hold about you. This is not an absolute right: we can retain data derived from your original data if it is no longer personal. We might also not be in a place where we can delete (all) of your data for, for instance, legal reasons. This will usually only apply to Business Support Clients as we are obliged to keep some financial records for 7 years.
• The right to object — you have the right to object to our processing of your data as set out below. This right depends on the circumstances of the processing, but we will be responding to you as soon as possible to clarify the request.
• The right to the restriction of processing — this right entitles you to request a pause on our processing of your data whilst you resolve a query relating to one of your other rights. We will apply this automatically if you request this whilst exercising one of your other rights.
• The right to data portability — this right grants you the ability to request a portable version of your personal data, i.e. data in an electronic format that you can then use with other service providers. We do not fit the criteria for this right, as we do not carry out automatic processing.
• You have rights related to automatic decision making — these rights relate to automated profiling, which we do not use.

In addition, where we rely on Consent as our legal basis, you have the right to unconditionally withdraw consent. At this point we will stop processing your data, and delete any personal data that we do not need to hold for other reasons. 

Finally you have the right to lodge a complaint with a supervisory body in Europe. You should normally do this in the country where you are habitually resident. In the UK this authority is the Information Commissioner. You can lodge a complaint at https://ico.org.uk/concerns/.

Of course if you are unhappy with the way we have handled your personal data, we would prefer to hear from you directly so we can work on a solution with you.