Data Rights Requests

Your rights

If data-protection law applies to our processing of your personal data, you may have rights including access, correction, erasure, restriction, portability, objection, withdrawal of consent and objection to direct marketing.

How to submit a request

Write to us using our contact details with the subject "Data Rights Request" and tell us which right you wish to exercise.

Please provide enough information for us to locate your data, such as the email used for your account/order and relevant order number. Do not send a passport or identity document unless we specifically request proportionate verification because it is necessary to protect your data from unauthorised disclosure.

Identity verification

We may ask for additional information where we have reasonable doubts about the identity of the requester. Verification will be proportionate to the sensitivity of the data and the risk of disclosing it to the wrong person.

Response time

We will respond within the period required by applicable data-protection law. Under the GDPR this is normally one month from receipt of a valid request, subject to permitted extensions for complex or numerous requests. If an extension is required, we will inform you within the initial period.

Fees

Requests are normally free of charge. A reasonable fee or refusal may be permitted for requests that are manifestly unfounded or excessive, particularly because of repetition, subject to applicable law.

Withdrawing consent

Where processing is based on consent, you can withdraw it at any time. For cookie consent, use the Cookie settings link. For marketing email, use the unsubscribe method in the message or contact us.

Complaints

If you are dissatisfied with our response, you may lodge a complaint with the competent supervisory authority. In Cyprus, information is available at https://www.dataprotection.gov.cy/.