Your Privacy Rights
Ask for a copy of your data, correct it, delete it, or withdraw consent.
Last updated:
1. What you can ask for
- Access — a copy of the personal data we hold about you, and an explanation of what we do with it.
- Rectification — correction of data that is wrong or incomplete.
- Erasure — deletion of your data, where we have no overriding legal reason to keep it. Order and invoice records must be kept for tax purposes.
- Restriction and objection — asking us to pause or stop a particular use, including any use based on legitimate interest.
- Portability — a machine-readable copy of the data you gave us, or transfer to another provider.
- Withdrawal of consent — for anything based on consent, such as analytics or affiliate attribution.
- Anonymisation, blocking or deletion of unnecessary data, and information about who we share data with (LGPD Art. 18).
2. How to make a request
Contact us at +1 (757) 634-5230, identify yourself with the email you used to order, and tell us which right you want to exercise. Including an order number helps us find your records quickly.
If we cannot identify you from what you send, we may ask for further information. We will only ask for what is necessary — we will not ask you to send identity documents unless there is genuine doubt.
3. How long it takes
We respond within 30 days under the GDPR and UK GDPR, and within 15 days for confirmation and access requests under the LGPD.
Complex requests can be extended by a further two months; we will tell you within the first month if that happens.
There is no charge. We may refuse or charge for requests that are manifestly unfounded or excessive, and we will explain why if we do.
5. If you are not satisfied
You may complain to your supervisory authority: your national data protection authority in the EEA, the Information Commissioner's Office in the UK, or the ANPD in Brazil.
You are welcome to raise it with us first at +1 (757) 634-5230 — we would rather fix it.