Under UK GDPR you have eight rights over your personal data. Exercise any of them here — we will respond within 30 days, free of charge.
UK GDPR grants every data subject the following rights. Most can be exercised directly through your account dashboard for speed — or via the request form below if you prefer.
Request a copy of all personal data we hold about you — a Subject Access Request (SAR). We will provide a structured export (JSON or PDF) within 30 days at no charge.
What we hold: your account details, listing content, industry/speciality, address, and moderation logs.
What Stripe holds on our behalf: VAT receipts, purchase date, package tier, billing postcode, and transaction IDs. These are available immediately in your Stripe billing portal — no need to wait 30 days. We can also include a summary in your SAR on request.
Note: We hold no bank details or card numbers — those never leave Stripe.
You can correct most personal data yourself, instantly from your dashboard after logging in — no need to contact us:
For data you cannot edit yourself (moderation logs, system records), email data@advertiseengland.com and we will correct it within 30 days. To update billing or VAT details, use the Stripe billing portal directly.
You can delete your listing and close your account yourself from your dashboard after logging in — no need to contact us. Account closure removes your listing, profile, and all associated personal data from our systems within 30 days.
We may retain the following after closure due to lawful obligations:
Stripe retains their own payment records under their legal obligations — you can manage those via the Stripe billing portal.
Ask us to pause processing your data while its accuracy is contested or while an objection is being considered. Your data remains stored but is not used or shared during the restriction period.
You will be notified before the restriction is lifted. To request restriction, use the form below or email data@advertiseengland.com with your request. We will acknowledge within 3 working days.
Receive your personal data in a machine-readable format (JSON or CSV) to transfer to another service. Applies to data you provided under contract or consent.
From us (via SAR): account details, listing content, photos, industry/speciality, address.
From Stripe directly: VAT receipts, purchase history, package tier, billing details — available immediately from your Stripe billing portal. We do not hold these and cannot export them on Stripe's behalf.
We will respond to portability requests within 30 days.
Object to processing based on legitimate interests or for direct marketing.
Marketing emails: use the unsubscribe link in any email or turn off marketing in your dashboard — takes effect immediately.
Analytics/marketing cookies: update your preferences via the — takes effect immediately.
For other objections (e.g. legitimate interests), email data@advertiseengland.com. We will assess and respond within 30 days.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects on you.
We do not currently use solely automated decision-making of this kind. Our content moderation flags content for human review — no listing is removed or penalised without a person making the final decision.
If we introduce automated decision-making in future, we will update this policy, notify users, and provide an opt-out before it takes effect.
Withdraw consent for marketing or cookies at any time — withdrawal does not affect any processing already carried out.
All consent withdrawals take effect immediately with no requirement to contact us.
You can submit a data rights request in any of the following ways. Using the form below is quickest as it ensures we receive all the information needed to process your request without delay.
Use the form below — quickest and ensures we have everything we need. Acknowledged within 3 working days.
data@advertiseengland.com
Include your full name, account email, and the right you wish to exercise.
Data Protection Officer
Advertise England Ltd
[Address — add before go-live]
Once we receive your request we follow a defined process to handle it securely and within the legal timeframe.
All responses are provided free of charge. We may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive — we will tell you if this applies and explain why.
Before we release, amend, or delete any personal data we must verify you are who you say you are. This protects you — it prevents someone else from accessing or deleting your data.
We will ask you to provide two of the following:
We will never ask for your full card number, CVV, sort code, bank account number, or password. We hold none of these — all payment data stays within Stripe.
If we cannot verify your identity after reasonable attempts, we may be unable to process the request. We will tell you this promptly so you can provide additional evidence.
In certain circumstances UK GDPR permits us to decline or limit a request. We will always tell you if an exception applies and explain the reason.
| Exception | Rights affected | Example |
|---|---|---|
| Legal obligation | Erasure, restriction | Transaction IDs (not card data or full billing records — those are held by Stripe) must be kept 7 years under HMRC Making Tax Digital rules. We cannot delete them early. Full VAT receipts and card data are Stripe's responsibility, not ours. |
| Establishment, exercise or defence of legal claims | Erasure, restriction, objection | If a dispute or investigation is ongoing, we may need to retain data relevant to that matter |
| Freedom of expression / public interest | Erasure | Published business reviews left by other users (not your own data) |
| Manifestly unfounded or excessive | All rights | Repetitive requests with no new basis — we may charge a fee or decline |
If you are unhappy with how we have handled your request, or believe we have applied an exemption incorrectly, please follow these steps:
Email data@advertiseengland.com explaining your concern. We will review the decision and respond within 10 working days. This is the fastest route to resolution.
If you remain unsatisfied, you have the right to complain to the UK Information Commissioner's Office at any time — you do not need to contact us first, but we would appreciate the opportunity to resolve the issue directly.
Complete the form below. We will acknowledge your request within 3 working days and respond in full within 30 days.
All fields marked * are required. Your request will be handled in confidence by our data team.
Thank you — we have received your data rights request. You will receive an acknowledgement email at the address provided within 3 working days, along with a reference number.
We will respond in full within 30 days. If we need to verify your identity first, we will contact you at the email address you provided.
