Legal Your rights

Your data rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights over the personal data we hold about you. This page explains each one, how to use it, and what to expect. It should be read alongside our Privacy Policy and Cookie Policy.

1. Right to be informed

You have the right to know what data we collect, why, and who we share it with. That's what our Privacy Policy is for.

2. Right of access (Subject Access Request)

You can ask us to confirm whether we process your data and, if so, to give you a copy of it along with information about how we use it. This is sometimes called a Subject Access Request (SAR). We do not normally charge a fee, and we will respond within one calendar month of receiving your request and confirming your identity — extendable by a further two months for complex or numerous requests, in which case we will tell you why.

3. Right to rectification

If any data we hold about you is inaccurate or incomplete, you can ask us to correct or complete it.

4. Right to erasure ("right to be forgotten")

You can ask us to delete your personal data where, for example, it is no longer needed for the purpose it was collected, you withdraw consent and there is no other legal basis for keeping it, or you object and we have no overriding grounds to continue. This right is not absolute — we may need to keep some records to meet accounting, tax or legal obligations, in which case we will tell you what we're keeping and why.

5. Right to restrict processing

You can ask us to pause using your data — while keeping it — in specific situations, such as while we verify its accuracy or while a dispute about our use of it is resolved.

6. Right to data portability

Where we process your data by consent or under a contract, and do so by automated means, you can ask for a copy in a structured, commonly used, machine-readable format, or ask us to send it directly to another provider where technically feasible.

7. Right to object

You can object to us processing your data where we rely on legitimate interests, and we will stop unless we can show compelling legitimate grounds that override your interests, or the processing is needed for legal claims. You have an absolute right to object to direct marketing at any time — use the unsubscribe link in any marketing email, or write to us, and we will stop immediately.

8. Rights related to automated decision-making and profiling

We do not use automated decision-making or profiling that produces legal or similarly significant effects about you. If that ever changes, we will update this page and explain the safeguards and your right to request human review.

9. How to exercise any of these rights

Email contact@hyselective.com telling us which right you want to use. We may need to verify your identity before acting on a request, which can add a short delay. Requests are free unless they are manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or decline the request — and we will always explain why.

10. Right to complain to the ICO

If you are unhappy with how we have handled your data, please contact us first so we can try to resolve it. You also have the right to complain directly to the UK's independent data protection regulator:

Regulator

Information Commissioner's Office (ICO)

Address

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

Helpline

0303 123 1113

Website

ico.org.uk

11. Contact point for data protection

We are a small team and are not required to appoint a formal Data Protection Officer, but all data-protection queries and requests should go to contact@hyselective.com, which reaches the people responsible for handling them at HyStudio.

12. Changes to this page

If data-protection law changes or we change how you can exercise your rights, we will update this page and the "last updated" date above.

Last updated 23 September 2026.