You are in control of your personal data. This page explains your rights under UK GDPR and how to make a request, including a subject access request (SAR) or a request to delete your data.
Your rights
- Access: ask for a copy of the personal data we hold about you (a SAR).
- Rectification: ask us to correct data that is wrong or incomplete.
- Erasure: ask us to delete your data (the right to be forgotten).
- Restriction and objection: ask us to pause or stop certain uses of your data.
- Portability: ask for your data in a portable, machine-readable format.
- Withdraw consent: where we rely on consent, such as location sharing, you can withdraw it at any time.
How to make a request
Email hello@circle247.co.uk with the subject line Data request. Please tell us:
- your name and the email address on your account;
- which right you want to use (for example, a copy of your data, or deletion);
- enough detail for us to find the right records.
To protect your data, we may need to confirm your identity before we act. A parent or Guardian can make a request on behalf of a child.
How long it takes
We respond within one month of receiving your request. If a request is complex or you have made several, we may extend this by up to two further months, and we will tell you why within the first month. There is normally no charge.
If you are not satisfied
Please come back to us first so we can put things right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.