Skip to main content
Your Data Rights (GDPR)

Understanding and exercising your rights under the General Data Protection Regulation (GDPR)

Overview

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR give you certain rights regarding your personal data. This page explains these rights and how you can exercise them.

Your Rights

1. Right to Access

You have the right to request a copy of the personal data we hold about you, including:

  • Account information (username, email, display name)
  • Study progress and statistics
  • Subscription and payment information
  • Usage data and activity logs

2. Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update most of your information directly in your account settings.

3. Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data when:

  • The data is no longer necessary for the original purpose
  • You withdraw your consent
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Note: We may retain certain information as required by law or for legitimate business purposes (e.g., transaction records for accounting).

4. Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

5. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

6. Right to Object

You have the right to object to processing of your personal data for direct marketing purposes or for purposes based on legitimate interests.

7. Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal.

How to Exercise Your Rights

To exercise any of your data protection rights, you can:

  • Email us: Send a request to privacy@msra.uk with the subject line indicating which right you wish to exercise
  • Use account settings: Some rights (like updating your information) can be exercised directly through your account settings
  • Contact form: Use our contact page

Response Time

We will respond to your request within one month of receipt. If your request is complex or we receive multiple requests, we may extend this period by up to two additional months, and we will inform you of any such extension.

Verification

To protect your privacy and security, we may need to verify your identity before processing your request. We may ask you to provide additional information to confirm your identity.

Right to Lodge a Complaint

If you are not satisfied with our response to your data protection request, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO):

Contact Us

For questions about your data rights or to exercise any of these rights, please contact us:

Data Protection Officer

Email: privacy@msra.uk

Please include your account email address and specify which right(s) you wish to exercise in your request.