GDPR & your data rights

Signetify is committed to the EU/UK General Data Protection Regulation. As a data subject you have the following rights, which we honour through the controls below.

• Access & portability (Art. 15, 20) — request a copy of the personal data we hold about you, in a portable format.
• Erasure / “right to be forgotten” (Art. 17) — request deletion. We cryptographically erase personal data and anonymise derived analytics, retaining only records we are legally required to keep (audit, tax).
• Rectification (Art. 16) — correct inaccurate personal data.
• Restriction & objection (Art. 18, 21) — limit or object to certain processing, including a right to object to processing for direct marketing.
• Consent withdrawal (Art. 7) — withdraw consent for analytics/marketing at any time; essential processing continues so the service works.
• Automated decisions & AI (Art. 22, EU AI Act) — AI-generated content is transparently labelled and subject to human review; you can request human oversight.
• Lodge a complaint — you may complain to your local supervisory authority.

Exercise a right: manage consent on the preferences page, or email privacy@signetify.com. We respond within statutory timeframes (one month under GDPR).