Your Data Rights

1. What rights do I have?

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• Right of access — receive a copy of the personal data we hold about you (a Data Subject Access Request, or DSAR)
• Right to rectification — have inaccurate personal data corrected
• Right to erasure — also called the "right to be forgotten" — ask us to delete your personal data
• Right to restrict processing — pause our use of your data while a query is resolved
• Right to data portability — receive your data in a machine-readable format
• Right to object — stop us processing data based on legitimate interests or for direct marketing
• Right to withdraw consent — where our processing relies on your consent

2. How do I exercise these rights?

Email our data protection contact with your request. Include the following so we can verify your identity and find your records:

• The email address associated with your AIPageSEO account
• Which right you want to exercise (access, delete, correct, etc.)
• For correction requests: the specific data you would like changed and the correct value
• For access / portability requests: whether you want JSON, CSV, or both

3. How long will it take?

We will acknowledge your request within 5 working days and respond in full within 30 days, as required by UK GDPR. For complex requests we may extend by a further 60 days, but we will tell you if this applies and why.

4. Is there a fee?

No. We do not charge for responding to data rights requests. We may charge a reasonable fee only if a request is manifestly unfounded, excessive, or repetitive — and we will tell you before proceeding.

5. What if my request is declined?

In rare cases we may be unable to comply — for example, if we need to retain certain data to meet legal obligations (tax records, fraud prevention, etc.). We will always explain our reasoning in writing, and you can escalate as described below.

6. Can I complain?

If you are unhappy with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

7. What data do we hold about you?

We hold the data described in our Privacy Policy, which typically includes:

• Your account email, name, and password (hashed)
• Credit balance and transaction history
• Tool usage logs (which audits you have run)
• Payment records processed by Stripe
• Connected Google Search Console tokens (if you linked your GSC account)