Right to be forgotten

The broad principle underpinning this right is to enable an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing.

Under the UK GDPR you can ask us to erase your personal data where:

• It is no longer needed for the purpose we collected it for
• You withdraw consent and we have no other legal basis to keep it
• You object to our using it, including for direct marketing
• It has been processed unlawfully, or the law requires its erasure

In certain circumstances it may not be appropriate to delete data, such as where we have a legal duty to keep anti-money laundering, tax or regulatory records. We will need to validate your request, will act on it within one month, and will confirm when it has been actioned. There is no charge, and if we cannot erase something we will tell you why.