GDPR & Data Rights

Right of Access

You may request a copy of all personal data we hold about you, including how it is used, who it is shared with, and how long it will be retained.

Right to Rectification

You may request correction of any inaccurate or incomplete personal data held in your records. We will act without undue delay.

Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data where there is no lawful reason to continue processing it.

Right to Restriction of Processing

You may ask us to limit how your data is used while a request or dispute is being resolved.

Right to Data Portability

You may request your data in a structured, machine-readable format such as JSON or CSV.

Right to Object

You may object to processing based on legitimate interests, including direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

• Contract — processing your application data to provide services
• Legitimate Interest — platform security and improvements
• Consent — marketing, analytics, and optional features
• Legal Obligation — compliance with laws and regulations

To submit a request, email privacy@sponsrpath.com with subject "Data Rights Request" and include:

• Your full name
• Your registered email address
• The type of request
• Additional relevant details

We respond within 30 days. Complex requests may take up to 60 additional days with prior notice.

If you are not satisfied, you can file a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Data Protection enquiries: privacy@sponsrpath.com