GDPR
Your rights under the General Data Protection Regulation.
Last updated May 2026
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have specific rights under the General Data Protection Regulation (GDPR) regarding your personal data.
Your Rights Explained
Right to Access
You can request a copy of all personal data we hold about you. We will provide this within 30 days at no charge.
Right to Rectification
If any data we hold about you is inaccurate or incomplete, you can ask us to correct it. You can update most profile information directly in your account settings.
Right to Erasure ("Right to be Forgotten")
You can request that we delete all personal data we hold about you. We will do so within 30 days, except where we are legally required to retain certain records.
Right to Data Portability
You can request your personal data in a structured, machine-readable format (JSON or CSV) so you can transfer it to another service.
Right to Restrict Processing
You can ask us to stop processing your data in certain circumstances, for example while you contest the accuracy of the data we hold.
Right to Object
You can object to our processing of your personal data at any time. We will stop processing unless we have compelling legitimate grounds to continue.
Right to Withdraw Consent
Where we process your data based on your consent, you can withdraw that consent at any time by contacting us. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
Right Not to Be Subject to Automated Decision-Making
We do not make any decisions about you using fully automated processes that have legal or significant effects on you.
How to Exercise Your Rights
Email us at support@itsposting.com with the subject line "GDPR Request" and tell us which right you want to exercise.
We will respond within 30 days. In complex cases we may extend this by a further 60 days; we will let you know if this is needed.
We may need to verify your identity before processing your request.
Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance: to deliver the ItsPosting service you signed up for
- Legitimate interests: to improve our service, prevent fraud, and ensure security
- Consent: for optional communications such as product updates and newsletters
Data Controller
For GDPR purposes, ItsPosting is the data controller for the personal data you provide.
Contact: support@itsposting.com
Right to Lodge a Complaint
If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority. In the EU, you can find your local authority at: edpb.europa.eu
Changes to This Page
We may update this page at any time. The "Last updated" date reflects the most recent version.