This Addendum pertains to individuals residing in the United Kingdom and details additional rights they have under the United Kingdom Data Protection Act 2018 (DPA) and the EU General Data Protection Regulation (GDPR) which is retained EU law after Brexit.

Your Rights and Choices in the UK

As a UK resident, you have several rights in relation to your personal data under the DPA and the retained GDPR, including:

  • Right to be informed: You have the right to be provided with clear, transparent, and easily understandable information about how we use your personal data and your rights. This is why we’re providing you with the information in this Addendum.
  • Right of access: You have the right to obtain access to your personal data (if we’re processing it) and certain other information (similar to that provided in this Privacy Policy). This is so you’re aware and can check that we’re using your personal data in accordance with data protection law.
  • Right to rectification: You are entitled to have your personal data corrected if it’s inaccurate or incomplete.
  • Right to erasure: This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
  • Right to restrict processing: You have the right to ‘block’ or suppress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further.
  • Right to data portability: You have the right to obtain and reuse your personal data in a structured, commonly used, and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.
  • Right to object to processing: You have the right to object to us processing your personal data for our legitimate interests or for direct marketing purposes (including in each case any related profiling).
  • Right to withdraw consent: If we have obtained your consent to process your personal data for certain activities (for example, for profiling your suitability for certain roles), or consent to market to you, you may withdraw your consent at any time.
  • Rights related to automated decision-making and profiling: You have the right not to be subject to a decision when it’s based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us.

To exercise any of these rights at any time, please contact us using the details in our “Contact Information” section on the main “Website Privacy Policy” web page.

In accordance with UK data protection laws, we will handle your request related to these rights with care and in a timely manner. If you are not satisfied with our response, you also have the right to lodge a complaint with the UK’s data protection authority, the Information Commissioner’s Office (ICO). For more information, visit https://ico.org.uk/.

Data Retention and Erasure

We retain your personal data for as long as necessary to provide the services you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our policies.

Upon your request, and where it is possible, we will delete your personal data or anonymise it so that it no longer identifies you, unless, we are legally allowed or required to maintain certain personal data, including situations such as:
If there’s an unresolved issue relating to your account, such as an outstanding credit on your account or an unresolved claim or dispute we will retain the necessary personal data until the issue is resolved;
Where we are required to retain the personal data for our legal, tax, audit, and accounting obligations, we will retain the necessary personal data for the period required by applicable law; and/or,
Where necessary for our legitimate business interests such as fraud prevention or to maintain the security of our users.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Changes to this Addendum

We may change this UK Privacy Rights Addendum from time to time. If we make changes, we will notify you by revising the date at the top of this addendum, and in some cases, we may provide you with additional notice (such as adding a statement to our website or sending you a notification). We encourage you to review this addendum whenever you access our services or otherwise interact with us to stay informed about our information practices and the choices available to you.

Contact Us

If you have any questions about this UK Privacy Rights Addendum, please contact us using the details in our “Contact Information” section on the main “Website Privacy Policy” web page.