Data Subject Rights (DSAR)

The rights you have

You can ask us to do any of the following, free of charge:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct data that is inaccurate or incomplete.
• Erasure — have data deleted where we no longer have grounds to keep it.
• Restriction — freeze processing while a dispute about accuracy or grounds is resolved.
• Portability — receive your data in a structured, machine-readable format, or have it sent to another provider.
• Objection — object to processing based on our legitimate interests, and to direct marketing at any time with no exceptions.
• Withdraw consent — for analytics, marketing cookies, or marketing email, at any time.

How to make a request

Send your request through our contact page, or email the address published there, with the subject line 'Data Subject Request'. Tell us which right you are exercising and, if it helps, what data or period you mean.

You do not need to use a particular form of words, and you do not need to give a reason except when objecting to legitimate-interests processing.

Verifying who you are

We will ask you to confirm your identity before releasing data — usually by replying from the email address on your Academy account. Where the request is broad or the data is sensitive we may ask for additional proof. We only use what you send for verification and delete it afterwards.

How long it takes

We respond within one calendar month of receiving a valid request. Where a request is complex or you have made several, we may extend by up to two further months and will tell you why within the first month.

When we may refuse or limit a response

We may withhold data where releasing it would disclose another person's personal data, where an exemption applies, or where a request is manifestly unfounded or excessive. If we refuse, we will tell you why and how to challenge it.

Some records — accounting records in particular — must be retained by law even after an erasure request.

If you are unhappy with our response

Use our complaints procedure first so we have a chance to put it right. You can also complain directly to the Information Commissioner's Office at ico.org.uk, or to the supervisory authority in your country of residence.

Requests are received by GEM The Agency on behalf of Genesis1 One LLC, corporate trustee of iRise Nations. Underlying controller arrangements are covered by a non-disclosure agreement.