Your rights under GDPR
Your data, your control
Under the General Data Protection Regulation (EU) 2016/679 and the EU AI Act 2024, you have the following rights over your personal data. All requests are processed within 30 days.
Right of Access (Art. 15 GDPR)
Obtain a copy of all personal data we hold about you, including your profile, quiz results, wishlists, price alerts, and consent history.
Right of Rectification (Art. 16 GDPR)
Correct inaccurate or incomplete personal data. Update your name, phone number, preferences, and language directly from your account settings.
Edit my profile →Right to Erasure (Art. 17 GDPR)
Permanently delete your account and all associated personal data — wishlists, price alerts, quiz profiles, consent records, and session history. This action is irreversible.
Delete my account →Right to Portability (Art. 20 GDPR)
Receive your data in a structured, machine-readable JSON format to transfer to another service. Use the export button above (Right of Access) — the same file fulfils portability.
AI Training Opt-Out (Art. 22 GDPR + EU AI Act Art. 50)
Object to your data being used to train or fine-tune AI and machine-learning models. Your quiz answers, search behaviour, and product preferences will be excluded from all training datasets.
Manage AI training preferences →Submit a formal request
Use this form to submit a formal Data Subject Access Request (DSAR). We will respond within 30 days as required by GDPR Article 12. You will receive an email confirmation immediately.
Response timeline
We respond to all data-subject requests within 30 days as required by GDPR Article 12. Complex requests may be extended by a further 60 days with prior notification.