Data Subject Rights — How to Make a Request
Bretalon Ltd (Company Number: 16253606)
Last updated: 12 February 2026
Your Rights
Under the UK GDPR, you have the right to:
- Access your personal data (Subject Access Request)
- Rectify inaccurate personal data
- Erase your personal data (“right to be forgotten”)
- Restrict the processing of your personal data
- Port your data to another controller in a structured, machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time where consent is the legal basis
How to Make a Request
By email: Send your request to info@bretalon.com
Please include:
- Your full name
- The email address or other identifier we may hold for you
- Which right you wish to exercise
- Any details that will help us locate your data
By post: Bretalon Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ
What to Expect
| Step | Timeframe |
|---|---|
| Acknowledgement | Within 5 business days |
| Identity verification | We may ask you to verify your identity to protect your data from unauthorised access |
| Response | Within one calendar month of receiving your request (or identity verification) |
| Extension | If your request is complex, we may extend by a further two months. We will inform you within the first month if an extension is needed, with reasons. |
Fees
There is no fee for exercising your rights in most cases. We may charge a reasonable fee if your request is manifestly unfounded or excessive (particularly if repetitive), and we will inform you before processing.
If You Are Unsatisfied
If you are not satisfied with our response, you can:
- Ask us to reconsider — contact us at info@bretalon.com
- Complain to the ICO:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk/make-a-complaint