Privacy Policy – Your Rights

You have the right to be informed

We have a legal obligation to provide you with concise, transparent, intelligible, and easily accessible information about your personal data and our use of it. We have written this policy to do just that, but if you have any questions or require more specific information, please contact us using the details at the top of this page.

You have the right to access your data

You have the right to ask us to confirm whether or not we hold any of your personal data. If we do, you have the right to have a copy of your information and to be informed of the following:

  1. why we are using your information;
  2. what categories of information we are using;
  3. how long we envisage holding your information.

In order to maintain the security of your information, we will have to verify your identity before we provide you with a copy of the information we hold.

You have the right to correct our records

Where you have requested a copy of the information we hold about you, you may notice that there are inaccuracies in the records, or that certain parts are incomplete. If this is the case, you can contact us so that we can correct, or provide supplementary, information to our records.

You have the right to be forgotten

There may be times where it is no longer necessary for us to hold personal data about you.

This could be if:

  1. the information is no longer needed for the original purpose that we collected it for;
  2. you withdraw your consent for us to use the information (and we have no other legal reason to keep using it);
  3. we have used your information unlawfully; or
  4. we are subject to a legal requirement to delete your information

In those situations, you have the right to have your personal data deleted. Note, however, that we may not always be able to comply with your request for erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

You have the right to data portability

You have the right to obtain a copy of your personal data for your own purposes. This right allows you to move, copy, or transfer your personal data more easily from one IT system to another, in a safe and secure way. If you would like us to transfer a copy of your data to you or another organisation, we will provide a structured, commonly used, and machine-readable file (such as a .CSV file). Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

You have the right to object to direct marketing

You can tell us at any time if you would prefer not to receive direct marketing from us. A link to this policy and an unsubscribe link OR instructions on how to unsubscribe are included in all our marketing communications.

You have the right to object to processing based on legitimate interests.

You have the right to object to the processing of your personal data in certain circumstances. In particular, you can ask us not to process your personal data where we have relied on legitimate interests as a legal basis for processing your personal data. You can exercise your right to prevent such processing by emailing dpo@peak.ai;

You have the right to restrict how we use your information

You have the right to ask us to stop using your personal data in any way other than simply keeping a copy of it. This right is available where:

  1. you have informed us that the information we hold about you is inaccurate, and we have not yet been able to verify this;
  2. you have objected to us using your information for our own legitimate interests and we are in the process of considering your objection;
  3. we have used your information in an unlawful way, but you do not want us to delete your data; and,
  4. we no longer need to use the information, but you need it for a legal claim.

If you wish to exercise any of the rights set out above, please contact us at info@peak.ai.  We aim to respond to all legitimate requests within one month (and if we are only processing the data in question on behalf of another party, the response may actually come from that other party as the relevant data controller). Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests.  In this case, we will notify you and keep you updated. 

You will not have to pay a fee to access your personal data (or to exercise any of the other rights).  However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive – alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).  This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.  We may also contact you to ask for further information in relation to your request to speed up our response.