Your personal information belongs to you.
Where we are processing your data based on your consent you can withdraw your consent and we must immediately stop processing your data. Please note that up to that point, we’re acting lawfully with your consent, withdrawal of consent cannot be backdated.
You have the right to request a copy of all personal data we hold relating to you and we must provide this within 30 days. You also have the right to require us to correct any records that are wrong. We have the right to confirm your identity before providing this information.
You have the right to require us to erase personal data and we must comply unless we need it for one of the purposes described above (for example, this might include the fact that we need to demonstrate your employer has undertaken training for you.) We also retain the right to keep data that is needed to establish, exercise or defend a legal claim.
Where we process your data based on a “legitimate interest” (see lawful basis section, above) you still have the right to object to our processing of your data. From that point, we must stop processing your data until we have determined whether your rights to privacy override the legitimate interests we have defined.
Finally, you may have the right to have your personal data transferred to another organisation, and we’re obliged to provide it to you in a clear and reasonable format.
We don’t do any automated profiling of data or people.