Your rights under GDPR and UK data protection law
Under the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018, you have comprehensive rights over how your personal data is collected, used, and stored. These rights are fundamental to your privacy and we are committed to making them easy to exercise.
You have the right to obtain confirmation that we are processing your personal data and, if so, to access that data along with specific information about how we process it.
We will provide you with a comprehensive report of all personal data we hold about you.
Response Time: Within 1 month (free of charge)
Format: Secure PDF or JSON export
You have the right to have inaccurate personal data corrected and incomplete personal data completed.
Automatic Updates: Some data (like preferences) updates automatically as you use the service.
For complex corrections or data you cannot edit yourself, contact our support team.
privacy@aclue.appYou have the right to have your personal data erased without undue delay in certain circumstances.
We may need to retain some data for legal compliance, such as transaction records for tax purposes.
Permanently delete your account and all associated personal data. This action cannot be undone.
Request deletion of specific categories of data whilst keeping your account active.
Processing Time: Within 30 days
Retention: Some data may be retained for legal compliance
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider.
Standards: Data exported in JSON format following industry standards for easy import elsewhere.
Download all your personal data in a machine-readable format. Perfect for transferring to another service or personal backup.
Choose specific categories of data to export, such as only preferences or recommendations.
Format: JSON, CSV, or XML
Delivery: Secure download link via email
You have the right to restrict the processing of your personal data in certain circumstances, meaning we can store it but not actively use it.
Temporarily limit how we use your data whilst maintaining your account and core functionality.
Effect: Data stored but not used for recommendations or analytics
Duration: Until restriction is lifted or data is erased
You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Absolute Right: You can always object to direct marketing - we must stop immediately.
Opt out of all marketing emails and promotional communications.
Object to specific types of data processing whilst keeping your account active.
Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
View and manage all your consent preferences in one place. Changes take effect immediately.
Easy Withdrawal: One-click consent withdrawal
Granular Control: Consent per purpose, not all-or-nothing
Use your account settings to update information, manage preferences, or delete your account.
Contact our Data Protection Officer for complex requests or assistance.
privacy@aclue.appUse our secure online form for formal data protection requests.
Response Time: We respond to all requests within 1 month (may be extended to 3 months for complex requests)
Identity Verification: We may need to verify your identity before processing sensitive requests
Free of Charge: Most requests are processed free of charge
Appeal Process: You can appeal our decisions or contact the ICO if unsatisfied
If you're unsatisfied with our response, you can lodge a complaint with the ICO.
EU residents can contact their national data protection authority.
Last updated: 8 December 2025