Data Rights

Last updated: April 2026

This page explains your data rights and how to exercise them. The rights available to you depend on where you are located. We are committed to honouring requests promptly and without discrimination.

Your Rights Under GDPR — EU and EEA Residents

If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) gives you the following rights:

GDPR Rights

  • Right of access — request a copy of the personal data we hold about you, along with information about how we process it.
  • Right to rectification — request correction of inaccurate or incomplete personal data.
  • Right to erasure — request deletion of your personal data ("right to be forgotten"), where we have no overriding legal basis to retain it.
  • Right to restriction of processing — request that we limit how we process your data in certain circumstances (for example, while a rectification request is being assessed).
  • Right to data portability — receive your personal data in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
  • Right to object — object to processing based on our legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your rights.
  • Rights related to automated decision-making — we do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

We will respond to verified GDPR requests within 30 days. In complex cases we may extend this by a further two months and will notify you accordingly.

Your Rights Under CCPA — California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the following rights:

CCPA / CPRA Rights

  • Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, our purposes for collection, and the categories of third parties with whom we share it.
  • Right to delete — request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to correct — request correction of inaccurate personal information.
  • Right to opt out of sale or sharing — we do not sell or share your personal information for cross-context behavioural advertising. There is nothing to opt out of.
  • Right to limit use of sensitive personal information — we do not use sensitive personal information for purposes beyond providing the service you signed up for.
  • Right to non-discrimination — we will not deny service, charge different prices, or provide a lower quality of service because you exercised your CCPA rights.

We will respond to verified CCPA requests within 45 days. We may extend this by a further 45 days when reasonably necessary and will notify you of the extension.

How to Submit a Request

To exercise any of the rights above, send a request to: privacy@allergyscan.com

Please include:

  • Your full name and the email address associated with your account
  • The specific right or rights you wish to exercise
  • Any relevant details about your request

To protect your data, we may ask you to verify your identity before we can process a request. Requests from authorised representatives require written proof of authorisation.

We will not charge a fee for processing a request unless it is manifestly unfounded or excessive.

Complaints

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint:

  • EU/EEA residents: contact your national data protection supervisory authority. A list is available at edpb.europa.eu.
  • UK residents: contact the Information Commissioner's Office (ICO) at ico.org.uk.
  • California residents: contact the California Privacy Protection Agency (CPPA) at cppa.ca.gov.

We encourage you to contact us first so we have the opportunity to address your concern directly.

Further Information

For full details of what data we collect and how we process it, see our Privacy Policy.