Your Data Rights
How to ask us for a copy of your personal data, have it corrected or deleted, or object to how we use it.
What you can ask for
You do not need to use a particular form of words, and you do not need to cite legislation. Just tell us what you want.
- Access
- A copy of the personal data we hold about you, and information about how we use it.
- Correction
- Have inaccurate personal data corrected, or incomplete data completed.
- Deletion
- Have your personal data deleted. This applies in defined circumstances — for example where we no longer need it for the purpose we collected it for.
- Restriction
- Have us stop using your personal data while a dispute about its accuracy or our use of it is resolved, without deleting it.
- Objection
- Object to processing we carry out on the basis of legitimate interests. As most of what we do relies on legitimate interests, this is usually the relevant right.
- Portability
- Receive personal data you gave us in a structured, commonly used, machine-readable format, where the processing is automated and based on consent or a contract.
- Withdrawing consent
- Withdraw consent at any time where we rely on it. Your privacy choices for this website can be changed instantly using the "Privacy choices" link in the footer, without contacting us.
How to make a request
Email info@astridevs.co.uk, or write to us at 9 Oxford Court, Manchester, England, M2 3WQ, United Kingdom.
It helps if you tell us:
- what you want us to do;
- the email address or name you would have used when contacting us, so we can find the records;
- a rough date or period, if you know it.
We deliberately do not offer an automated "delete everything" button. This website holds no account and no profile, so such a button could only ever act on systems it is not connected to — which would be a control that looks reassuring and does nothing. A person handles your request instead.
Confirming who you are
We will ask for enough information to be reasonably satisfied that you are who you say you are, and no more. Usually that means replying from the email address that appears in the records concerned.
We will never ask you to upload a passport, driving licence or other identity document through a web form. If you receive a message claiming to be from us that asks you to do so, it did not come from us.
How long it takes
We respond within one month of receiving your request. If a request is particularly complex, or you have made several, we may extend that by up to two further months — we will tell you within the first month if that happens, and why.
There is no charge.
Requests made on someone else's behalf
You can ask someone else — a solicitor, a relative, or an authorised agent — to make a request for you. We will need to be satisfied they are entitled to act for you, which usually means written authority from you.
When we can refuse
We can refuse a request that is manifestly unfounded or excessive, or charge a reasonable fee for it. We can also refuse where an exemption in data protection law applies. If we refuse, we will tell you why, and tell you how to complain.
Where deletion is requested but we are required to keep a record — for example to comply with a legal obligation or to establish or defend a legal claim — we will say so and explain what we are keeping and for how long.
Data we hold for a client
Where we process personal data on behalf of a client, in a system we built or support for them, that client is the controller and we act on their instructions. We cannot action a rights request about that data ourselves.
If you contact us about data in a client's system, we will tell you promptly and, where we can, point you to the right organisation. If you tell us who the client is, we will pass your request on to them.
If you are not satisfied
Tell us first at info@astridevs.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint (opens in a new tab) , or to the supervisory authority in your country if you are in the European Union.