Last updated: Wednesday, December 17th, 2025
If you are in the EU/EEA or UK, you have the rights below over your personal data. To exercise them, contact [email protected].
- Access – obtain a copy of your personal data and information about our processing.
- Rectification – correct inaccurate or incomplete data.
- Erasure – ask us to delete data in certain circumstances.
- Restriction – ask us to pause processing in certain circumstances.
- Portability – receive data you provided to us in a structured, commonly used, machinereadable format and, where technically feasible, have it sent to another controller.
- Object – object to processing based on legitimate interests and to direct marketing at any time.
- Withdraw consent – where we rely on consent (e.g., marketing or analytics cookies), you can withdraw it at any time; this does not affect processing before withdrawal.
- Rights related to automated decisions – CRC does not make decisions producing legal or similarly significant effects solely by automated means.
Limits and exemptions. Some rights may not apply in full, for example where honoring the request would prejudice the prevention or detection of crime, or where we must retain data to comply with law.
Identity verification. We may ask for information to confirm your identity and region.
Response times. We aim to respond within one month, extendable by two months for complex requests (we’ll tell you if we need more time).
Complaints. You can complain to your local authority.
- EU/EEA: contact your national data protection authority.
- UK: Information Commissioner’s Office (ICO).
We encourage you to contact us first so we can resolve your concern.
