1. Right of access
You can ask for a copy of every piece of personal data we hold about you. We respond in plain text or JSON within 30 days, free of charge. Repeat or excessive requests may carry a small administrative fee.
2. Right of rectification
If anything we hold about you is wrong or out of date, you can ask us to fix it. Email the correction and we'll update the record within seven working days.
3. Right to erasure
Also known as "the right to be forgotten". You can ask us to delete your personal data when it is no longer needed for the purpose we collected it. We will delete or anonymise the record unless a legal obligation requires us to keep it longer.
4. Right to restrict processing
You can ask us to pause processing while we investigate an accuracy complaint or while you decide whether to exercise other rights. During the pause we will keep the record but not use it.
5. Right to data portability
You can ask for your data in a structured, machine-readable format (CSV or JSON) and request that we transmit it to another controller where technically feasible.
6. Right to object
You can object to processing based on our legitimate interests, including direct marketing. For direct marketing the objection is absolute — opt out and we'll stop, full stop.
7. Right to withdraw consent
Where processing is based on your consent (e.g. push notifications, the Saturday Bulletin), you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before it.
8. Right not to be subject to automated decisions
We do not make automated decisions with legal or similarly significant effects on you. Editorial rankings are produced by humans.
9. Right to complain
If you believe we have mishandled your data, you can complain to your local data protection authority. We would prefer to resolve it with you directly first — try [email protected] before you escalate.
10. How to exercise a right
- Write to [email protected] with the right you want to exercise.
- Confirm the email address you use with us so we can verify the request.
- Expect a confirmation within three working days, and a full response within 30 days.
11. Identification
To protect you, we may ask for additional information to confirm your identity before acting on a request. We will not ask for documents disproportionate to the request.
Last updated: 14 May 2026