GDPR Rights

• Access: ask for a copy of personal data we process about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete data where GDPR gives you that right.
• Restriction: ask us to pause certain processing while a concern is reviewed.
• Objection: object to processing based on legitimate interests.
• Portability: ask for data you provided in a commonly used format where the right applies.
• Withdraw consent: withdraw optional location, analytics, or marketing consent at any time.
• Complaint: raise a concern with the Irish Data Protection Commission.

Email [email protected] with the right you want to exercise and enough detail for us to find the relevant account, submission, receipt, pub correction, or email record. We may need to verify that you are the person connected to the data before acting on the request.

We normally respond within one month. If a request is complex or you make several requests, GDPR may allow extra time. We will tell you if that happens.

Some requests may be limited where we need data for security, legal claims, abuse prevention, or the rights and freedoms of others. If we cannot identify anonymous visitor data from the information you provide, we may be unable to act on it. Public aggregate price data may remain where individual identifiers have been removed or where retention is justified for the public index.

Where deletion is appropriate, we aim to delete or anonymise profile data, detach or anonymise submissions where possible, delete receipt images and OCR data that are no longer needed, and remove email preferences or campaign records tied to you.