Use the privacy-request option on our contact form. Tell us the email address used in any earlier submission and the right you want to exercise. Do not send identity documents unless we specifically request a limited verification step.
Submit a privacy request1. Rights we support
Requests you can make
Access and confirmation
Ask whether we hold personal information about you and request a readable copy, subject to lawful exceptions and the rights of others.
Correction
Ask us to correct personal information that is inaccurate, incomplete, outdated, irrelevant or misleading.
Deletion
Ask us to delete personal information when there is no continuing lawful reason to retain it.
Restriction
Where applicable, ask us to limit processing while accuracy, a legal claim or an objection is being considered.
Object
Object to processing based on legitimate interests for reasons relating to your particular situation.
Portability
Where the legal conditions are met, request eligible information you supplied in a structured, commonly used format.
Withdraw consent
Withdraw consent for future processing where consent is the basis. This does not affect processing already carried out lawfully.
Complain
Raise a concern with us first or complain to the privacy regulator or supervisory authority available in your jurisdiction.
2. GDPR and UK GDPR
European Economic Area and United Kingdom
Where the EU GDPR or UK GDPR applies, the rights above may include access, rectification, erasure, restriction, objection, portability and withdrawal of consent. Rights are not absolute; the available response depends on the processing purpose, legal basis, identity verification and applicable exceptions.
We aim to respond without undue delay and ordinarily within one month where GDPR timing applies. A complex or repeated request may lawfully take longer, in which case we will explain the extension. You may complain to the data-protection authority where you live, work or believe an infringement occurred. EEA visitors can find their national supervisory authority through the European Data Protection Board; UK visitors may contact the Information Commissioner’s Office.
3. Canada
Canadian access and correction rights
Where PIPEDA or an applicable provincial privacy law applies, you may request information about the existence, use and disclosure of personal information, obtain access, challenge its accuracy and completeness, and raise a complaint. We aim to respond within 30 days where that statutory period applies, subject to permitted extensions.
Unresolved concerns may be directed to the Office of the Privacy Commissioner of Canada or the applicable provincial authority.
4. United States
State privacy choices
Residents of California and other U.S. states may have rights to know, access, correct or delete covered personal information and to appeal certain decisions, depending on whether the relevant law applies. We will not discriminate against you for making a valid request.
We do not currently sell personal information, share it for cross-context behavioural advertising, use it for targeted advertising or process sensitive personal information to infer characteristics. Therefore, the site does not currently need a “Do Not Sell or Share” mechanism. This position will be reassessed before advertising technology is activated.
5. Other directory countries
Australia, New Zealand, South Africa and India
- Australia: where the Privacy Act and Australian Privacy Principles apply, individuals may request access and correction and raise a privacy complaint with the Office of the Australian Information Commissioner after first contacting the organisation.
- New Zealand: the Privacy Act 2020 provides rights to access and request correction of personal information and to attach a statement of correction in some circumstances. Concerns may be taken to the Office of the Privacy Commissioner.
- South Africa: where POPIA applies, a data subject may request access and may request correction, destruction or deletion in accordance with applicable procedures, and may use the Information Regulator complaint process.
- India: rights under the Digital Personal Data Protection Act and implementing rules apply according to their legal commencement and scope.
We will apply the law relevant to the request rather than assuming every right or deadline applies in every situation.
6. How requests work
Fair verification and response
- 1Submit the request
Use the secure form and identify the right you want to exercise.
- 2We locate the record
Provide the email used for a correction or contact message. We do not maintain visitor accounts.
- 3Proportionate verification
We may ask for limited information needed to protect the record from an unauthorised request.
- 4Decision and action
We provide the information, take the requested action, or explain a lawful limitation and any available appeal or complaint route.
Requests are ordinarily free. We may refuse or charge only where applicable law expressly allows it, such as for a manifestly unfounded or excessive request.