Our approach to data protection
Erasures handles reputation matters that may contain private or sensitive information. We aim to collect only the information needed to assess an enquiry, deliver an agreed service, communicate with you, protect our systems and meet applicable legal obligations.
This page explains how you can exercise your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. Our Privacy Policy provides further information about the personal data we collect, our purposes and lawful bases, recipients, international transfers and retention.
Your data protection rights
- Right to be informed — receive clear information about how we use your personal data.
- Right of access — ask whether we hold your personal data and request a copy of it.
- Right to rectification — ask us to correct inaccurate data or complete information that is incomplete.
- Right to erasure — ask us to delete personal data where the legal requirements are met.
- Right to restrict processing — ask us to limit how we use personal data in certain circumstances.
- Right to data portability — receive qualifying data in a structured, commonly used format where this right applies.
- Right to object — object to certain processing based on legitimate interests and to direct marketing.
- Rights relating to automated decisions — request appropriate safeguards where a qualifying decision is made solely by automated means.
How to make a request
Email hello@erasures.co.uk with the subject line ‘Data protection request’, call +44 203 031 1109, or write to Erasures, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ.
Please explain which right you want to exercise and provide enough information for us to locate the relevant records. You do not need to use a special form or quote a particular section of the law.
Identity and third-party information
We may ask for proportionate information to confirm your identity or the authority of someone acting for you. This helps prevent personal information being disclosed or changed without permission.
A response may need to protect confidential information and the rights of other people. If an exemption or restriction applies, we will explain the position where the law permits us to do so.
When we will respond
We respond without undue delay and normally within one calendar month after receiving a valid request or any information reasonably required to confirm identity. For a complex request, or where one person makes several requests, the law may permit an extension of up to a further two months. If an extension is necessary, we will explain why within the initial response period.
Data protection requests are normally handled without charge. A reasonable fee may be permitted, or a request may be refused, where it is manifestly unfounded or excessive. Any such decision will be explained.
Withdrawing consent
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that was lawful before withdrawal, and it does not prevent processing supported by another lawful basis.
You can also change your optional website cookie choice at any time using the Cookie settings control shown on the site.
Questions and complaints
Please contact hello@erasures.co.uk first if you have a question or concern so we can investigate it. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk.