UK GDPR & Data Protection Rights

BonusHorizon.com respects your privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your data protection rights in detail and how to exercise them.

Your Data Protection Rights

1. Right to be Informed

You have the right to clear, transparent information about how we collect and use your personal data. This information is provided in our Privacy Policy.

2. Right of Access

You have the right to request a copy of the personal data we hold about you. This is known as a Data Subject Access Request (DSAR).

What you'll receive: A copy of your personal data and supplementary information about how it's processed.

Response time: We will respond within one month of receiving your request.

3. Right to Rectification

You have the right to have inaccurate or incomplete personal data corrected.

How to exercise: Contact us with evidence of the correct information.

Response time: We will respond within one month.

4. Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data was unlawfully processed
• Legal obligation requires erasure

Note: This right is not absolute. We may retain data where we have a legal obligation or legitimate interest.

5. Right to Restrict Processing

You can request that we restrict processing of your personal data in specific situations:

• You contest the accuracy of the data
• Processing is unlawful but you don't want erasure
• We no longer need the data but you need it for legal claims
• You've objected to processing pending verification

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

Applies when:

• Processing is based on consent or contract
• Processing is carried out by automated means

7. Right to Object

You have the right to object to processing of your personal data based on:

• Legitimate interests
• Performance of a task in the public interest
• Direct marketing (absolute right)
• Scientific or historical research, or statistical purposes

8. Rights Related to Automated Decision Making

BonusHorizon.com does not use automated decision-making or profiling that produces legal or similarly significant effects. If this changes, we will inform you and provide information about the logic involved and the significance of such processing.

9. Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time. This does not affect the lawfulness of processing based on consent before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please contact us:

Verification

To protect your privacy, we must verify your identity before fulfilling requests. We may ask for additional information to confirm you are the data subject.

Response Times

We will respond to requests within one month of receipt. In complex cases, this may be extended by two additional months. We will inform you of any extension within the first month.

Fees

We do not charge a fee for exercising your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK data protection authority:

Data Controller Information

The data controller responsible for your personal data is:

Data Protection Principles

We process personal data in accordance with UK GDPR principles:

• Lawfulness, Fairness, Transparency: Processing is lawful, fair, and transparent
• Purpose Limitation: Data collected for specified, explicit, legitimate purposes
• Data Minimization: Only necessary data is collected
• Accuracy: Data is accurate and kept up to date
• Storage Limitation: Data kept only as long as necessary
• Integrity and Confidentiality: Appropriate security measures in place
• Accountability: We are responsible for and can demonstrate compliance

International Data Transfers

If we transfer your data outside the UK, we ensure appropriate safeguards including:

• Standard Contractual Clauses approved by UK authorities
• Adequacy decisions recognizing equivalent protection
• Binding Corporate Rules

Privacy Policy Contact Us