InSignLanguage Ltd — last updated 22 July 2026 — version 1.1

You have a number of rights over the personal data we hold about you. This page tells you what those rights are, how to use them and what to expect from us. It supports our Privacy Notice.

Your rights at a glance

Under the UK GDPR and the Data Protection Act 2018 you have the right to:

• Be informed about how we use your data — see our Privacy Notice.

• Access the personal data we hold about you (a "subject access request" or SAR).

• Rectify data that is inaccurate or incomplete.

• Erase data we no longer need to keep ("the right to be forgotten").

• Restrict how we use your data in certain situations.

• Portability — receive data you gave us in a structured, commonly used, machine-readable format and send it to another organisation.

• Object to processing based on legitimate interests or to direct marketing.

• Withdraw consent at any time where we rely on consent.

• Be free from solely automated decision-making that has a legal or similarly significant effect on you. (We do not carry out this kind of automated decision-making.)

How to make a request

You can make a request in any of the following ways:

Please include:

• your full name and a way to reach you;

• which right you want to use;

• enough detail for us to find the information (for example dates, services, or who you have been in contact with);

• proof of identity if we do not already hold one (we may ask for this once we receive your request).

You do not need to use a particular form. A family member, friend or representative can ask on your behalf, but we will need their written authority.

How long it takes

We will:

• acknowledge your request within 2 Working Days;

• respond substantively within 1 calendar month of receiving a valid request;

• if your request is complex or you have made several requests, we may extend by up to a further 2 months and will tell you why.

There is normally no charge. We may charge a reasonable fee, or refuse a request, if it is manifestly unfounded or excessive — for example, a clearly repetitive request. If we do, we will explain why and tell you about your right to complain.

When we may refuse, or only partly grant, a request

There are limited situations where we may not be able to fulfil a request, for example:

• where we are required by law to keep the data (HMRC, Companies Act, Pensions);

• where the data is needed for ongoing legal claims;

• where the data is a safeguarding record subject to statutory retention;

• where fulfilling the request would adversely affect the rights of another person;

• where the data is held under a litigation hold.

If we cannot fulfil your request, in whole or in part, we will explain why and tell you about your right to complain to the ICO.

Complaints

If you are not satisfied with how we have handled your request you can:

1. ask us to review the decision — write to the Data Protection Lead at the address above;

2. complain to the Information Commissioner's Office (ICO):

We would, however, appreciate the chance to put things right first.

Marketing — quick opt-out

To stop receiving marketing emails, click "unsubscribe" at the bottom of any marketing email or email support@insignlanguage.co.uk with "Unsubscribe" in the subject line. We will action your request within 5 Working Days and add you to our suppression list so you do not receive further marketing.

What we do with your request

When you contact us about your rights, we record the request in our Rights Request Register so we can track our response within the statutory deadline. We retain the record for 6 years as evidence of compliance, in line with UK GDPR accountability requirements. We do not use the information for any other purpose.

InSignLanguage Ltd · 26 Domum Road, Portsmouth PO2 0QZ · Company number 10943637 · VAT registration number GB 298 6629 31 · ICO registration ZC163713 · support@insignlanguage.co.uk