Your UK GDPR rights

You have rights over your personal data under the UK GDPR. Here is what they are, how to exercise them, and what encryption implies for some of them.

In short

You have rights of access, rectification, erasure, portability (export in JSON, CSV or XML) and objection. Send your requests to [email protected]: we respond within one month. For a complaint, you can go to the UK ICO.

Your rights

• Access: obtain confirmation that your data is processed, and a copy of that data.
• Rectification: have inaccurate data corrected.
• Erasure: ask for your data to be deleted.
• Portability: receive your data in a structured format — export in JSON, CSV or XML.
• Objection: object to certain processing.

How to exercise your rights

Write to [email protected]. We respond within one month.

What encryption implies

Everabyte does not hold your encryption keys: we therefore cannot produce the plaintext of your files. To get readable copies, download them yourself from your account (see our article on downloading files).

Business customers: the DPA

A Data Processing Agreement (DPA) exists for business customers. To request one, contact us through our contact page.

Minors

Everabyte is intended for users aged 18 and over.

Filing a complaint

If you believe your rights are not respected, you can lodge a complaint with the ICO, the UK data protection authority: ico.org.uk/make-a-complaint. The full framework is described in our privacy policy.

Common issues

How long until I get a response?

Within one month.

Can I get a readable copy of my files from you?

No: we do not hold your keys and cannot produce the plaintext. Download your files from your account to get readable copies.

In which formats can I export my data?

JSON, CSV or XML.

How do I contact the supervisory authority?

Through the ICO website: ico.org.uk/make-a-complaint.