// LEGAL
Your personal data rights
If the GDPR or UK GDPR applies to our processing, you may have the following rights (subject to exceptions):
Access
Request a copy of personal data we hold about you.
Rectification
Request correction of inaccurate or incomplete data.
Erasure (“right to be forgotten”)
Request deletion where applicable law allows — we may retain data where we have a legal obligation or overriding legitimate ground.
Restriction
Request that we limit processing in certain cases.
Data portability
Receive your data in a structured, machine-readable format where processing is based on contract or consent and automated.
Object
Object to processing based on legitimate interests or to direct marketing.
Withdraw consent
Where we rely on consent for optional cookies, you may withdraw it at any time — see Cookie Policy.
Complaint
You may lodge a complaint with your local supervisory authority.
How to exercise rights: email privacy@alfanestlabs.com (or contact@alfanestlabs.com if your request is not privacy-specific) from your account email and state the request type. We may need to verify identity. We will respond within the time limits set by applicable law (typically within one month under the GDPR, where that law applies, unless an extension applies).