Your Data Rights

The rights you have

Depending on where you live, you may have some or all of these rights under GDPR, UK GDPR, the Australian Privacy Act, CCPA/CPRA, PIPEDA, or other privacy regimes:

• Access — receive a copy of the personal data we hold about you.
• Correction — fix data that is wrong or incomplete.
• Deletion — have your data erased ("right to be forgotten"), subject to legal retention obligations.
• Portability — receive your data in a structured, machine-readable format and transfer it elsewhere.
• Restriction — limit how we process your data while a dispute is resolved.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing relies on consent, withdraw it at any time.
• Non-discrimination — exercise your rights without penalty or reduced service quality.

How to make a request

Email us via the Contact page with the subject line "Data Rights Request" and tell us:

• Which right you are exercising;
• The email address on your account;
• Any specific data you are concerned about.

We may ask for additional information to verify your identity before acting.

Timing

We respond within 30 days for GDPR/UK GDPR requests, 45 days for CCPA requests, and as required for other regimes. We will tell you if we need to extend.

Self-service

• Access: your history is visible at /history; your messages at /messages.
• Notifications: control them at /account.
• Account deletion: available from /account after email confirmation.

Right to complain

If you believe we have not handled your data lawfully, you can lodge a complaint with your local supervisory authority — for example the OAIC (Australia), ICO (UK), CNIL (France), or your state's attorney general (US). We'd appreciate the chance to address your concern first via /legal/contact.