Your Data Rights

How to exercise your rights under the UK General Data Protection Regulation

Your Rights at a Glance

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights in relation to your personal data. These rights are not absolute and may be subject to certain conditions and exemptions under applicable law.

Right	What It Means
Right of Access (Article 15)	You may request a copy of the personal data we hold about you, together with information about how we process it, who we share it with, and how long we retain it.
Right to Rectification (Article 16)	You may request that we correct inaccurate personal data, or complete incomplete personal data.
Right to Erasure (Article 17)	You may request that we delete your personal data. This is sometimes called the "right to be forgotten". We must comply unless there is a lawful reason for retaining the data (e.g., legal obligation, ongoing contract).
Right to Restriction (Article 18)	You may request that we restrict (i.e., pause) the processing of your personal data in certain circumstances, such as while we verify accuracy or consider an objection.
Right to Data Portability (Article 20)	You may request your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV), and have it transmitted to another controller where technically feasible.
Right to Object (Article 21)	You may object to processing based on our legitimate interests. We must stop unless we demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision-Making (Article 22)	You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. Alfrada does not currently make such automated decisions.
Right to Withdraw Consent (Article 7(3))	Where processing is based on consent — such as analytics cookies on our marketing website — you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. See our Cookie Policy for how to change your cookie choice.

What You Can Do in the App

Before submitting a formal request, you may be able to exercise some of these rights directly within the Alfrada application:

Delete conversations: You can delete individual conversations or your entire conversation history from within the app.
View and delete memories: You can view AI-extracted memory entries and delete individual entries or clear all memories.
Delete uploaded files: You can remove documents, images, audio, and other files you have uploaded.
Disconnect integrations: You can disconnect third-party service integrations (Google, Microsoft, Slack, etc.) from your account settings, which will delete the associated OAuth tokens.
Delete your account: You can permanently delete your Alfrada account and all associated data directly from the app. Go to Settings → Safety and select Delete Account. Upon deletion, all your conversations, memories, uploaded files, and integration data will be permanently removed. Payment records will be retained for 6 years as required by HMRC record-keeping obligations.
Withdraw cookie consent: If you previously accepted analytics cookies on our marketing website, you can withdraw consent by clearing the alfrada_consent entry from your browser's Local Storage (Developer Tools → Application → Local Storage) and reloading the page. The consent banner will reappear, and you can select "Reject". See our Cookie Policy for full details.

How to Submit a Formal Request

To exercise any of the rights listed above formally, or if you need assistance that is not available through the app, please contact us:

Email: privacy@strategize.inc
Subject line: "Data Subject Request — [Your Right]" (e.g., "Data Subject Request — Right of Access")
Post: Data Protection, Strategize and Insight Practice Limited, Unit 1 Camboro Business Park, Oakington Road, Girton, Cambridge, England, CB3 0QH

Submit a Data Rights Request

What We Need From You

To process your request, we may need to verify your identity. This is to protect your data from unauthorised access. We may ask you to:

Confirm the email address associated with your Alfrada account.
Provide sufficient information for us to identify you and locate your data.
In certain cases, provide a form of identification (e.g., for access requests where the account email cannot be verified).

We will not request more information than is necessary to verify your identity.

Our Response Timeframe

We will acknowledge your request within 5 working days.
We will respond substantively within one calendar month of receiving your verified request.
If your request is complex or we have received a high volume of requests, we may extend this period by up to two further months. If we do, we will inform you within the first month and explain the reason for the extension.
If we decide not to act on your request, we will inform you of the reasons and your right to complain to the supervisory authority.

Fees

In most cases, we will not charge a fee for processing your request. However, we may charge a reasonable fee if your request is manifestly unfounded or excessive, or if you request additional copies of your data beyond the first copy.

Complaints

If you are not satisfied with our response to your request, or you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We encourage you to contact us first at privacy@strategize.inc so that we have the opportunity to resolve your concern.

Governing Law and Jurisdiction

This page and any dispute or claim (including non-contractual disputes or claims) arising out of or in connection with it shall be governed by and construed in accordance with the laws of England and Wales. The courts of England shall have exclusive jurisdiction to settle any such dispute or claim.