Legal

Your Privacy Rights

Under UK GDPR, you have powerful rights over your personal data. Here's what they are and how to exercise them.

Our Commitment to You. We take your privacy seriously. Your handbook data is encrypted, hosted within the UK or EEA where practicable, and not used to train general-purpose AI models. You can export or delete your data at any time.

Your 8 Data Protection Rights

Right to Access

You can request a copy of all personal data we hold about you. We'll provide it within one month in a commonly used format.

How to exercise: Email us at support@regulyn.co.uk with "Subject Access Request" in the subject line.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can request we correct it.

How to exercise: Update most information directly in your account settings, or email us for other corrections.

Right to Erasure

Also known as the "right to be forgotten". You can request we delete your personal data in certain circumstances.

How to exercise: Delete your account in settings, or email us. Data is then deleted in line with the retention periods in our Privacy Policy.

Right to Restriction

You can request we limit how we process your data while you contest its accuracy or object to processing.

How to exercise: Email us explaining why you want processing restricted. We'll respond within one month.

Right to Portability

You can receive your personal data in a structured, machine-readable format and transfer it to another service.

How to exercise: Export your handbook as Word or PDF, or PDF directly from the platform at any time.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

How to exercise: Unsubscribe from marketing emails, or email us to object to other processing.

Rights About AI Decisions

You have the right not to be subject to decisions based solely on automated processing that significantly affect you.

Our approach: AI suggestions in Regulyn are recommendations. You decide what to accept or reject.

Withdraw Consent

Where we rely on consent (like marketing emails), you can withdraw it at any time without affecting prior processing.

How to exercise: Click "unsubscribe" in any email, or update your preferences in account settings.

How We Protect Your Data

Encryption

All data is encrypted in transit and at rest.

UK and EEA Hosting

Primary service data is hosted within the UK or EEA where practicable. Where other processing involves international transfers, appropriate transfer safeguards apply.

No General-Purpose AI Training

Your handbook content is not used to train general-purpose AI models. Your data stays yours.

How to Make a Request

1
Send us an email
Email support@regulyn.co.uk with "Data Protection Request" in the subject line. Tell us which right you want to exercise.
2
We verify your identity
To protect your data, we may ask you to confirm your identity. We'll usually ask you to respond from the email on your account.
3
We respond within one month
We'll action your request and respond within one month. If we need more time (up to two additional months for complex requests), we'll let you know.

Cost: Requests are free. We may charge a reasonable fee for manifestly unfounded or excessive requests.

Not Happy With Our Response?

If you're not satisfied with how we've handled your request, you have the right to complain to the UK's data protection regulator.

Information Commissioner's Office (ICO)

Website: ico.org.uk
Helpline: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF