Exercising your rights over your data

Your rights

To be informed

To know that your personal data is being processed, and why.

To access

To obtain a copy of the personal data we hold about you.

To object

To refuse processing, including for direct marketing.

To rectification

To have inaccurate or incomplete data corrected.

To erasure or blocking

To have data removed or suspended where the grounds in the Act apply.

To data portability

To receive your data in a structured, commonly used electronic format.

To damages

To be indemnified for damage caused by inaccurate, incomplete or unlawfully obtained data.

To file a complaint

To complain to the National Privacy Commission at any time.

How to make a request

1. 1. Email our Data Protection Officer using the form opposite, or the address on the contact page.
2. 2. Tell us which right you are exercising and what data it concerns.
3. 3. We will ask you to verify your identity — we are not permitted to disclose personal data to someone we cannot identify.
4. 4. We respond within the periods set by the NPC. There is no charge for a reasonable request.