Data Subject Rights
Subject to legal limits, a data subject may request access to personal data, correction of inaccurate information, or deletion where retention is no longer justified. A person may also object to processing in circumstances recognised by law or request restriction where such a remedy is available.
Available rights depend on applicable law and the nature of the request.
Requests and Verification
To exercise a privacy right, a requester should provide enough information to identify the relevant interaction and the data concerned. The business may decline or limit a request where retention is required for legal, contractual, or operational reasons, or where the request cannot be verified.
Requests are handled after reasonable verification of identity and scope.
Retention of Data
Inquiry records, order-related information, and technical logs are retained for periods that are reasonably necessary for response handling, production administration, security, dispute management, and compliance obligations. When data is no longer required, it is deleted, anonymised, or otherwise removed from active use in line with the business’s retention practices.
Records are kept only for as long as needed for the stated purpose or a legal requirement.
Policy Updates
When this policy is updated, the revised version will apply from the date it is made available on the website unless a different effective date is stated. Material changes may be highlighted where appropriate, but users should review the notice periodically to remain informed of current practices.
This notice may be revised to reflect operational, technical, or legal changes.