Your Data Rights

Your rights under UK GDPR

As a user of Ask Fin, you have the following rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018:

• Right of access — request a copy of the personal data we hold about you (also called a Subject Access Request or SAR)
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — ask us to delete your personal data in certain circumstances (the "right to be forgotten")
• Right to restrict processing — ask us to limit how we use your data in certain circumstances
• Right to object — object to us processing your data based on legitimate interests
• Right to data portability — receive a copy of your data in a portable, machine-readable format in certain circumstances
• Right to withdraw consent — where we process your data on the basis of your consent, you can withdraw it at any time

How to make a request

To exercise any of these rights, please email us at help@askfin.co.uk with the subject “Data Rights Request”, or write to us at the postal address below. You can also manage some data preferences via the account settings in your dashboard.

We will respond to your request within one calendar month of receipt. We may ask you to verify your identity before processing your request. Exercising your rights is free of charge in most circumstances.

Account closure and data deletion

When you close your Ask Fin account, we will deactivate your access. Your personal data will be deleted in accordance with our Privacy Policy — account data is deleted within 90 days of closure, subject to legal retention requirements (for example, payment records are kept for 7 years). Data you have stored in your browser's localStorage (budget, debts, savings entries) is stored on your device and is deleted when you use the delete function in Settings or clear your browser data.

How to complain to the ICO

If you are not satisfied with how we have handled your personal data or responded to a data rights request, you have the right to complain to the Information Commissioner's Office (ICO) — the UK's data protection regulator.

We would ask you to contact us first so we have the opportunity to resolve your concern before you escalate to the ICO.