GDPR & Data Protection
Your rights over your personal data and how to exercise them.
Last updated: August 2026
Our commitment
We handle personal data in line with the principles of the EU General Data Protection Regulation (GDPR): lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and security.
Lawful basis for processing
We process data on the basis of your consent, the performance of our agreement with you, our legitimate interest in operating a trusted verification directory, and compliance with legal obligations.
Your rights
Under GDPR you have the following rights regarding your personal data:
- Right of access — obtain a copy of the data we hold about you.
- Right to rectification — correct inaccurate or incomplete data.
- Right to erasure — request deletion of your data where applicable.
- Right to restrict or object to processing.
- Right to data portability — receive your data in a portable format.
International transfers
Where data is transferred across borders to enable international matching, we apply appropriate safeguards to protect it.
Exercising your rights
To exercise any of these rights, contact our Data Protection team at [email protected]. We will respond within the timeframes required by law.