Your Data Rights

You have the right to request a copy of all personal data we hold about you. This is known as a Subject Access Request (SAR). We will confirm whether we process your personal data and provide a copy, along with information about how it is used, where it is stored, who it is shared with, and for how long it is retained.

We will respond within one calendar month of receiving a valid request at no charge.

If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected or completed. For example, if your delivery address or contact details change, you can update these directly in your account, or contact us and we will make the correction promptly.

Also known as the "right to be forgotten", this allows you to ask us to delete your personal data where:

It is no longer necessary for the purposes for which it was collected

You withdraw consent and there is no other legal basis for processing

You object to processing and there are no overriding legitimate grounds

The data has been unlawfully processed

This right is not absolute — we may need to retain certain data to comply with legal obligations (for example, financial records required by HMRC). We will explain any such limitations when responding to your request.

You may request that we restrict the processing of your personal data in the following circumstances:

You contest the accuracy of the data, while we verify it

Processing is unlawful and you oppose erasure, requesting restriction instead

We no longer need the data but you require it for the establishment, exercise, or defence of legal claims

You have objected to processing and we are considering whether our legitimate interests override yours

Where processing is restricted, we will continue to store your data but will not otherwise use it without your consent (unless for legal claims, or to protect the rights of others).

Where we process your data based on your consent or to perform a contract, and the processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON).

You also have the right to ask us to transmit this data directly to another controller where technically feasible.

You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. We will then cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

You also have an absolute right to object to processing for direct marketing purposes at any time, with no exceptions. If you object to marketing, we will stop immediately.

You have the right not to be subject to a decision made solely by automated processing (including profiling) that produces legal or similarly significant effects on you.

NovaTech Systems does not make any solely automated decisions that affect your legal rights or produce similarly significant consequences. All significant decisions are made with human involvement.

Where we rely on your consent as the legal basis for processing (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.

To withdraw consent, please contact us at contact@coscomtech.co.uk or use the unsubscribe link in any marketing email we have sent you.