11. Your rights You have many rights under data protection (GDPR) legislation. These include: Right of Access You have the right know what information we hold about you and to ask, in writing, to see your records. We will supply any information you ask for that we hold about you as soon as possible, but this may take up to 30 days. We will not charge you for this other than in exceptional circumstances. You will be asked for proof of identity as the person dealing with your request may not be the staff member you have met before. We need to be sure we are only releasing your personal data to you. This is called a Subject Access Request (SAR), and can be done by: Emailing our Data Manager: [email protected] Writing to our Data Manager, c/o Glass Door, 155a King’s Road, Chelsea, London, SW3 5TX Right to be informed You have the right to be informed how your personal data will be used. This policy, as well as any additional information or notice that is provided to you either at the time you provided your details, or otherwise, is intended to provide you with this information. Right to withdraw consent Where we process your data based on your consent (for example, to send you marketing texts or emails), you can withdraw that consent at any time. To do this, or to discuss this right further with us, please contact us using the details in the ‘Contact us’ section below. Right to object You also have a right to object to us processing data where we are relying on it being within our legitimate interests to do so (for example, to send you direct marketing by post). To do this, or to discuss this right further with us, please contact us using the details in the ‘Contact us’ section below. Right to restrict processing In certain situations, you have the right to ask for processing of your personal data to be restricted because there is some disagreement about its accuracy or legitimate usage. Right of erasure In some cases, you have the right to be forgotten (i.e. to have your personal data deleted from our database). Where you have requested that we do not send you marketing materials, we will need to keep some limited information to ensure that you are not contacted in the future. Right of rectification If you believe our records are inaccurate, you have the right to ask for those records concerning you to be updated. To update your records please contact us using the details in the ‘Contact us’ section below. Right to data portability Where we are processing your personal data because you have given us your consent to do so, you have the right to request that the data is transferred from one service provider to another.