GDPR Rights & Data Protection

Your Data Protection Rights

Under the UK General Data Protection Regulation (UK GDPR), you have several rights regarding your personal data. This page explains these rights and how to exercise them.

Right of Access

You have the right to request copies of your personal data. This is known as a 'subject access request'.

What you can request:

• Confirmation that we are processing your personal data
• A copy of your personal data
• Information about how we use your data
• Information about who we share your data with
• How long we keep your data
• Information about your other rights

How to request: Email privacy@spinthrillclub.com with "Subject Access Request" in the subject line.

Response time: We will respond within 30 days of receiving your request.

Cost: Free of charge for the first request. Additional copies may incur a reasonable fee.

Right to Rectification

You have the right to have inaccurate personal data corrected or completed if it's incomplete.

When you can use this right:

• Your personal data is inaccurate
• Your personal data is incomplete
• You can provide additional information to complete your data

How to request: Contact us at privacy@spinthrillclub.com with details of the incorrect information.

Response time: We will respond within 30 days and notify any third parties we've shared your data with.

Right to Erasure (Right to be Forgotten)

You have the right to have your personal data deleted in certain circumstances.

When you can request deletion:

• The personal data is no longer necessary for the original purpose
• You withdraw consent and there's no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• Your personal data has been unlawfully processed
• Deletion is required for compliance with a legal obligation

Limitations: We may not be able to delete your data if we need it for:

• Compliance with legal obligations
• Establishment, exercise, or defence of legal claims
• Legitimate business interests that override your rights

Right to Restrict Processing

You have the right to limit how we use your personal data in certain circumstances.

When you can restrict processing:

• You contest the accuracy of your personal data
• Processing is unlawful but you don't want deletion
• We no longer need the data but you need it for legal claims
• You've objected to processing pending verification of legitimate grounds

When processing is restricted, we can only store your data and use it with your consent or for legal claims.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

When this right applies:

• Processing is based on consent or contract
• Processing is carried out by automated means

You can also request that we transmit your data directly to another organisation where technically feasible.

Right to Object

You have the right to object to processing of your personal data in certain circumstances.

Grounds for objection:

• Legitimate interests: You can object to processing based on legitimate interests unless we can demonstrate compelling legitimate grounds
• Direct marketing: You can object to direct marketing at any time, including profiling for marketing purposes
• Research and statistics: You can object to processing for research or statistical purposes unless it's in the public interest

Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time.

How to withdraw consent:

• Marketing emails: Use the unsubscribe link in any email
• Cookies: Adjust your browser settings or use our cookie preference centre
• Other processing: Contact us at privacy@spinthrillclub.com

Important: Withdrawing consent doesn't affect the lawfulness of processing before withdrawal.

How to Exercise Your Rights

Contact Information:

What to include in your request:

• Your full name and contact details
• Proof of identity (copy of passport or driving licence)
• Clear description of your request
• Any relevant dates or reference numbers

Response times:

• Standard requests: 30 days from receipt
• Complex requests: Up to 60 days (we'll inform you of any extension)
• Urgent requests: We'll prioritise where possible

Complaints and Appeals

If you're not satisfied with how we've handled your request or how we process your personal data, you have the right to complain.

Internal complaints:

First, please contact our Data Protection Officer at privacy@spinthrillclub.com to try to resolve the issue.

Supervisory authority:

You can also lodge a complaint with the UK's data protection supervisory authority:

Data Processing Activities

We process personal data for the following purposes:

International Transfers

Some of our service providers may process your data outside the UK. We ensure appropriate safeguards are in place:

• Adequacy decisions: Countries recognised by the UK as providing adequate protection
• Standard contractual clauses: EU-approved contracts ensuring data protection
• Certification schemes: Providers certified under recognised privacy frameworks

Updates to This Information

We may update this information from time to time. Significant changes will be communicated through our website or by email where appropriate.

For the most current information about our data processing activities, please see our Privacy Policy.