Data subject rights
This page explains how to exercise your data-protection rights with Axora, and how we handle requests about data we process for clients.
1. Your rights
- Access: confirmation that we process your data and a copy of it.
- Rectification: correction of inaccurate or incomplete data.
- Erasure: deletion where the data is no longer needed, consent is withdrawn or processing is unlawful — unless the law requires us to keep it.
- Restriction: limiting processing while accuracy or lawfulness is checked.
- Portability: your data in a structured, machine-readable format, where the law provides this right.
- Objection: to processing based on legitimate interests, and always to direct marketing.
- Automated decisions: human review of decisions based solely on automated processing that significantly affect you, where the law provides this right.
- Withdrawing consent where processing relies on consent.
- Complaining to a data-protection authority.
2. Where to send your request
If your request is about data Axora controls — for example because you are a client contact or visited this website — email privacy@axorastack.com.
If you are a customer of a product built on Axora, send your request to that product's provider, which controls your data. If you write to us instead, we will pass your request to the provider and help it respond.
3. Verifying your identity
We ask for the information we need to confirm your identity before acting on a request and delete it once the request is closed, unless we must keep it.
4. Timing
We respond without undue delay and within the time the applicable law sets. Under the GDPR and UK GDPR that is one month, which can be extended by two further months for complex or numerous requests; we will tell you if we need the extension and why.
5. Limits on rights
Some rights are limited by law. For example, records required for anti-money-laundering purposes cannot be deleted before the legal retention period ends, and the law may prevent us from disclosing information about a financial-crime report.
6. Complaints
If you are unhappy with our response, you can complain to the data-protection authority where you live, work or where the issue arose.