Depending on the circumstances, users may have rights to access their data, request correction, ask for deletion, object to certain processing, or request restriction. Some requests may be limited where we must retain information for legal, regulatory, or evidentiary reasons. We assess each request in light of applicable law and the context of the processing.
Available rights depend on the legal basis and the nature of the processing.
Requests
How to Make a Request
To make a rights request, users should provide enough information to identify the relevant data and the nature of the request. We may ask for additional details to verify identity or clarify the scope of the request. If a request is refused in whole or in part, we will explain the reason where required by law.
Requests are reviewed for identity, scope, and legal validity before action is taken.
Data Retention
Data Retention
We keep personal data only for as long as needed for the purpose for which it was collected, including any follow-up communication, recordkeeping, dispute handling, or legal compliance. When data is no longer required, we delete it, anonymize it, or otherwise restrict it in line with applicable law and internal retention practices.
Retention is based on the purpose of collection, legal duties, and operational need.
Policy Updates
Policy Updates
The updated version will apply from the date stated in the revised policy. Where changes are material, we will take reasonable steps to draw attention to them through the site or other appropriate means. Users should review this policy periodically to stay informed about current practices.
We may revise this policy when our practices, services, or legal obligations change.