Your Privacy Rights
Your Rights Under GDPR
Under UK GDPR and EU GDPR, you have rights regarding your personal data. This page explains these rights and how to exercise them with Bugni Labs.
Right to Be Informed
You have the right to be informed about how your personal data is collected and used. We provide this information through our Privacy Policy and other privacy notices.
Right of Access
You have the right to access your personal data and receive information about how it is processed. You can request a copy of your personal data held by us.
Your access request will include:
- Confirmation that we process your personal data
- Categories of data we hold
- Purposes of processing
- Recipients or categories of recipients
- Retention periods
- Your other rights
- A copy of your personal data
Right to Rectification
You have the right to have inaccurate personal data corrected and incomplete data completed. We will rectify data without undue delay and notify relevant third parties where appropriate.
Right to Erasure (Right to be Forgotten)
You can request deletion of your personal data in certain circumstances:
- Data no longer necessary for the purpose collected
- You withdraw consent (where processing was based on consent)
- You object and there are no overriding legitimate grounds
- Data processed unlawfully
- Legal obligation requires erasure
We may retain data where legal obligations require it or for legitimate interests (e.g., legal claims).
Right to Restrict Processing
You can request restriction of processing in certain cases:
- You contest the accuracy of data (restriction while we verify)
- Processing is unlawful but you don't want erasure
- We no longer need the data but you need it for legal claims
- You've objected to processing (restriction while we assess)
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used, machine-readable format and have it transmitted to another controller.
Right to Object
You can object to processing based on:
- Legitimate interests: We will stop processing unless we demonstrate compelling legitimate grounds
- Direct marketing: We will stop processing for marketing purposes
- Research and statistics: Unless necessary for public interest
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects, unless necessary for contract, authorised by law, or based on explicit consent.
Where automated decisions are made, you have the right to human intervention, to express your view, and to contest the decision.
How to Exercise Your Rights
To exercise any of these rights:
- Email: dpo@bugni.io
- Subject line: "Data Subject Rights Request - [specify right]"
- Include: Your full name, email address, description of your request
- Verification: We may ask for identification to verify your identity
Response Timeframes
We will respond to requests without undue delay and within one month of receipt. We may extend this by two further months for complex requests, and will notify you if an extension is needed.
Fees
Requests are normally free. We may charge a reasonable fee for manifestly unfounded, excessive, or repetitive requests, or provide a copy of data already provided.
Right to Complain
If you're unhappy with how we've handled your request or our data practices, you can lodge a complaint with:
UK Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
For EEA residents, contact your local supervisory authority.
Contact
Data Protection Officer: dpo@bugni.io
Privacy Policy: View Privacy Policy