Your Data Rights
Your rights over your personal data and how to exercise them.
- Last updated
- 27 October 2026
reporton processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. On this page you will find an overview of your rights as a data subject, how to exercise them free of charge and whom to contact.
Controller
The controller responsible for the processing of your personal data on reporton.org is reporton, 14 Coleham Head Works, Shrewsbury SY3 7BJ, United Kingdom. You can reach us by email at [email protected] or by telephone on 01743 358 214. Requests concerning your data can be sent to this address at any time.
Right to lodge a complaint
You can lodge a complaint with the Information Commissioner's Office (ICO). Before doing so, you are welcome to contact us at [email protected]; many questions can be clarified quickly.
Why we may process data
Every processing activity on reporton.org rests on one of the legal bases of the UK GDPR: consent, the performance of a contract, a legal obligation or a legitimate interest that is not overridden by your interests. Our privacy policy lists which basis applies to which purpose.
Your right to object
Where we process your data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation; we will then stop unless there are compelling legitimate grounds. Consent you have given can be withdrawn at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Rights of data subjects
You may ask reporton at any time which personal data about you we hold, for what purposes, for how long and with whom it has been shared, and you can obtain a copy of it (access). Incorrect or incomplete data will be corrected or completed at your request (rectification).
You can request the erasure of your data where it is no longer needed, where you withdraw your consent or where the processing is unlawful, and you can ask us to restrict processing while a dispute is being resolved. Where the processing is based on consent or a contract, you have the right to receive your data in a structured, machine-readable format (data portability).
Making a request
To exercise any of these rights, a short message to [email protected] is sufficient. We may ask you to confirm your identity so that no one else can obtain your data. We respond within one month of receiving your request; in complex cases this period can be extended by two further months, and we will tell you if it is. Exercising your rights is free of charge.
International transfers
Some of our service providers may process data outside the United Kingdom. In that case we make sure that an adequate level of protection is guaranteed, for example through the UK adequacy regulations or the International Data Transfer Agreement. You can request a copy of these safeguards from us.