Data Request
This page explains how you can exercise your rights under UK data protection law in relation to personal data processed by The GDPR Studio. We aim to handle all requests fairly, transparently, and in line with our legal obligations.
Your data protection rights
Under UK GDPR and the Data Protection Act 2018, you may have the right to:
- Access your personal data (a subject access request)
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data (in certain circumstances)
- Restrict the processing of your personal data (in certain circumstances)
- Object to processing where we rely on legitimate interests
- Request data portability, where applicable
- Withdraw consent where processing is based on consent
Further information about how we process personal data is available in our Privacy Policy.
How to make a data request
To exercise any of your data protection rights, please email us using the address below. This allows us to handle requests securely and efficiently.
Email: DPO@thegdprstudio.co.uk
When contacting us, please provide enough information for us to understand your request and identify the personal data concerned. We will only use the information you provide to process and respond to your request.
We may need to verify your identity before taking action on your request. Any verification requested will be necessary and proportionate.
Response timeframes
- We aim to respond within one month of receiving your request.
- If a request is complex or multiple requests are received, this period may be extended by up to two further months. We will inform you if this applies.
If you are unhappy with our response
We encourage you to contact us first so we can try to resolve any concerns. You also have the right to raise a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO).