What are my data removal rights under GDPR?

The General Data Protection Regulation (GDPR) grants you the 'right to erasure', also known as the 'right to be forgotten'. This fundamental privacy right allows you to request that we delete or remove your personal data in certain circumstances.

When Can You Request Data Removal? You have the right to request deletion of your personal data when:

• The data is no longer necessary for the purpose it was originally collected
• You withdraw consent and there's no other legal basis for processing
• You object to the processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation
• The data was collected in relation to offering information society services to a child

Types of Data Removal Requests We handle two main types of removal requests:

• Operational Data Removal: Deletion of your account data, usage history, preferences, and system-generated data
• Commercial Data Removal: Removal of your information from company records, commercial databases, and business registers

Limitations to the Right The right to erasure is not absolute. We may need to retain certain data when:

• There's a legal obligation to keep the data (e.g., financial records for tax purposes)
• The data is necessary for legal claims
• There's an overriding public interest
• The data is needed for archiving, research, or statistical purposes

How to Make a Request To exercise your right to erasure, please submit a formal request to our Data Protection Officer including:

• Your full name and contact details
• Specific description of the data you want removed
• The reason for your request
• Any relevant account or reference numbers

Processing Your Request We will:

• Acknowledge your request within 3 working days
• Verify your identity to protect your data
• Assess whether the right to erasure applies
• Respond within one month (extendable by two months for complex requests)
• Inform you of any data we cannot delete and explain why

Contact Information To submit a data removal request or for questions about your rights: Email: [email protected] Post: Data Protection Officer, Companies in the UK, Unit 6301, PO Box 6945, London W1A 6US

For more information about specific types of removal requests, please see our guides on Operational Data Removal and Commercial Data Removal.