Your Privacy Rights
Under UK GDPR, you have powerful rights over your personal data. Here's what they are and how to exercise them.
Our Commitment to You
We take your privacy seriously. Your handbook data is encrypted, stored in the UK/EU, and never used to train AI models. You can export or delete your data at any time.
Your 8 Data Protection Rights
Right to Access
You can request a copy of all personal data we hold about you. We'll provide it within one month in a commonly used format.
How to exercise: Email us at support@bounda.co.uk with "Subject Access Request" in the subject line.
Right to Rectification
If any of your personal data is inaccurate or incomplete, you can request we correct it.
How to exercise: Update most information directly in your account settings, or email us for other corrections.
Right to Erasure
Also known as the "right to be forgotten". You can request we delete your personal data in certain circumstances.
How to exercise: Delete your account in settings, or email us. Data is permanently removed within 30 days.
Right to Restriction
You can request we limit how we process your data while you contest its accuracy or object to processing.
How to exercise: Email us explaining why you want processing restricted. We'll respond within one month.
Right to Portability
You can receive your personal data in a structured, machine-readable format and transfer it to another service.
How to exercise: Export your handbook as Word or PDF, or PDF directly from the platform at any time.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
How to exercise: Unsubscribe from marketing emails, or email us to object to other processing.
Rights About AI Decisions
You have the right not to be subject to decisions based solely on automated processing that significantly affect you.
Our approach: AI suggestions in Bounda are always recommendations — you decide what to accept or reject.
Withdraw Consent
Where we rely on consent (like marketing emails), you can withdraw it at any time without affecting prior processing.
How to exercise: Click "unsubscribe" in any email, or update your preferences in account settings.
How We Protect Your Data
Encryption
All data encrypted in transit (TLS 1.3) and at rest (AES-256).
UK/EU Hosting
Your data is stored in the UK and EU. No transfers to countries without adequate protection.
No AI Training
Your handbook content is never used to train AI models. Your data stays yours.
How to Make a Request
Send us an email
Email support@bounda.co.uk with "Data Protection Request" in the subject line. Tell us which right you want to exercise.
We verify your identity
To protect your data, we may ask you to confirm your identity. We'll usually ask you to respond from the email on your account.
We respond within one month
We'll action your request and respond within one month. If we need more time (up to two additional months for complex requests), we'll let you know.
Cost: Requests are free. We may charge a reasonable fee for manifestly unfounded or excessive requests.
Make a Data RequestNot Happy With Our Response?
If you're not satisfied with how we've handled your request, you have the right to complain to the UK's data protection regulator.
Information Commissioner's Office (ICO)
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF