Data requests.
Your legal rights.
Under data protection laws you have rights over your personal data that include the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data and, where the lawful ground of processing is consent, to withdraw consent.
If you have an account on this site, or have left comments, you can request to receive an exported file of all your personal data on this site. You can also request that I erase any personal data I have about you. There is, however, some data I am obliged to keep for administrative, legal, or security purposes.
You will not have to pay a fee to access or decide over your personal data. However, I may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive or I can refuse to comply with your request in these circumstances.
I may need to request specific information from you to help me confirm your identity and ensure your right to access your personal data. This is a security measure to ensure that personal data is not disclosed to anyone else. I may also contact you to ask you for further information in relation to your request to speed up my response.
I try to respond to all legitimate requests within one month. Occasionally it may take me longer than a month if your request is particularly complex or you have made a number of requests. In this case, I will notify you.
This privacy policy borrows heavily from Suzzane Dibble’s template from her GDPR training materials.