Your Data Rights (UK GDPR)
Your rights over your personal data and how to exercise them.
- Last updated
- 25 October 2026
This page summarises the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 with regard to the personal data that celebyzo processes when you use celebyzo.org or contact us, and explains how to exercise them. Full details of the processing are set out in our privacy policy.
Controller
Responsible for data processing within the meaning of the UK GDPR is celebyzo, located at 14 Hythe Bridge Street, Oxford OX1 2EW, United Kingdom. For every question about your personal data, please write to [email protected] or call us on 01865 402 718.
Your right to object
Where we process your data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation; we will then stop unless there are compelling legitimate grounds. Consent you have given can be withdrawn at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Complaints
You can lodge a complaint with the Information Commissioner's Office (ICO). Before doing so, you are welcome to contact us at [email protected]; many questions can be clarified quickly.
Making a request
Please send your request by email to [email protected] or by post to 14 Hythe Bridge Street, Oxford OX1 2EW. To protect your data, we may ask for information that confirms your identity. You will receive an answer within one month, and no fee is charged unless a request is manifestly unfounded or excessive.
Rights of data subjects
You have the right to obtain confirmation as to whether we process personal data about you and, if so, to receive a copy of it together with information about the purposes, the recipients and the storage period (right of access). You may ask us to correct inaccurate data and to complete incomplete data (right to rectification).
Data that is no longer required, that was processed unlawfully or that you no longer consent to us using will be deleted on request (erasure); instead of deletion you can ask for processing to be restricted. You can also have the data you provided to us transferred to you or to another controller in a common electronic format (portability).
International transfers
Where personal data is transferred to a country outside the UK, this happens only if the UK has recognised an adequate level of protection there or if suitable safeguards such as the International Data Transfer Agreement are in place. A copy of these safeguards is available on request at [email protected].