GDPR & Your Data Rights

• Access — request a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — limit how we use your data in certain cases.
• Portability — receive your data in a portable format.
• Objection — object to processing based on legitimate interests or direct marketing.
• Automated decisions — ask for human review of significant automated decisions, including AI matching.

We process data under contract, legitimate interests, consent, and legal obligation, as described in our Privacy Policy.

Email privacy@carenzo.co.uk or use our Contact page. We respond within one month. There is normally no charge, and we may ask you to verify your identity first.

Where data is transferred outside the UK, we use appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations.

If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.