You have legal rights relating to your personal information. We may ask you for proof of identity when you make a request to exercise a right. We do this to make sure we provide information only to the right person.
The legal rights you have are explained below.
The right to object to the use of your personal information
If you don’t want us to use your information, or want us to stop using it for a specific purpose, you can ask us to stop. We will stop using the information as long as there are no reasons why we need to continue using it. If we have to continue using it, we will contact you to explain why.
You can ask us not to send you marketing messages. You can also ask us not to use your personal information for customer profiling.
If you have given us permission to use your personal information, you can withdraw that permission at any time. Whenever we get your permission we will explain the process for withdrawing it, and any consequences of doing so. You can withdraw your permission at any time by contacting our customer services team, as explained in the how to contact us section of this privacy notice.
The right to get copies of your personal information (the 'right of access')
You have the right to ask for a copy of the information we hold about you, and we will usually provide this free of charge. For your security, we will take reasonable steps to confirm your identity before providing any information we may have about you.
The right to have your personal information transferred to another organisation (the 'right to data portability')
You can ask us to transfer any of your personal information to a specific company or person. We will try to transfer the information in the format you request. If this is not possible, we will contact you to agree an alternative format.
The right to get your personal information corrected (the 'right to rectification')
We do our best to make sure that your personal information is kept up to date. If you think that your information is not up to date or is incomplete, please contact us.
The right to limit how organisations use your personal information (the 'right to restriction')
You can ask us to stop using your personal information for specific purposes or for a limited time, such as while we are checking the accuracy of your personal information. We will always try to meet your request, but there may be times where we cannot. If this is the case, we will explain why.
The right to get your personal information deleted (the 'right to be forgotten')
In certain circumstances you can ask us to stop keeping or using your personal information or ask us to restrict how we use it.
If we can delete your information we will, but sometimes we must keep it for legal reasons. If we cannot meet your request, we will contact you to explain why.
Rights relating to automated decision-making and profiling
You have the right not to accept a decision based just on automated processing, unless the decision is:
- Necessary for the purposes of a contract between us and you;
- Allowed by law (for example, to prevent fraud); or
- Based on your clear consent.
In these situations, you do have the right to get an explanation of the decision, ask for a person to be involved in reviewing it, express your views and challenge the decision. We will tell you if we cannot meet your request or how your request might affect you.
If you want to exercise any of the rights listed above, please contact us in any of the ways set out in the how to contact us section below.