Data Rights and Requests

DRAFT — not approved for publication. Complete the outstanding facts, obtain appropriate legal review and add a version and effective date before publishing.

Making a request

Use the privacy request service to ask for access, correction, a personal-data export or account deletion. Sign in to submit and track an account request. People who cannot sign in can use the public contact form on that page.

Identity verification and secure delivery

We verify identity before releasing or deleting account information. Do not send passwords or unnecessary identity-document copies. Approved JSON exports are available privately to the verified signed-in requester and expire after 24 hours; they are not ordinary email attachments.

Review and retention obligations

Deletion requires a separate review. Shared business records, legal holds and other justified obligations may require partial deletion, anonymisation or documented refusal. Explain the reviewed rights, limitations and applicable response periods for POPIA, EU GDPR and UK GDPR.

Other rights and complaints

[Confirm objection, restriction, portability, consent withdrawal and other applicable rights and how to exercise them. Add the Information Officer/privacy contact and appropriate regulator complaint routes.]

External services and policy information

Explain how requests covering email providers and other processors are handled. Link to the Privacy Policy and Cookie Policy. Add the effective date, version and review date.