Your data rights

Capitalizt Ltd (company number 16890768, registered at 128 City Road, London EC1V 2NX) is the data controller. You have real rights over the data we hold about you, and we will answer any request within thirty days.

You may ask for a copy of everything we hold about you. That includes your account details, information about your messages, who your guardians are, and your payment history.

If anything we hold about you is wrong or incomplete, you can have it put right. Most of it you can change yourself in your account. For anything else, write to us.

You may ask us to delete your data. We will remove your account, your messages, and your payment records, except where the law requires us to keep financial records for a period.

Please be certain before you ask. Once a message is deleted it is gone, and nobody can bring it back, including us. If it was written for somebody who has not yet received it, they never will.

You can ask us to hold your data but stop using it. If you tell us something we hold is inaccurate, we will stop using it while we check.

You may have your data in a structured, commonly used, machine readable format, and we will send it directly to another service where that is technically possible.

Where we rely on legitimate interests, you may object. We will stop unless we can show compelling grounds that override your interests and rights.

A young person has every one of the rights on this page, and can use them themselves. An adult with parental responsibility may also use them on their behalf.

A request to delete a young person’s data is actioned straight away rather than at the end of any retention period. We hold a declared date of birth and one adult’s name and email address, and nothing else. We do not profile children and we do not market to them.

Four reasons, depending on the data. To do what you paid us to do. Our legitimate interest in keeping the service working and secure. Legal obligations, mainly financial records. And your consent, for anything optional, which you can withdraw whenever you like.

Within the European Economic Area. If anything is ever transferred outside it, we put appropriate safeguards in place, such as the standard contractual clauses approved by the European Commission.

Email hello@inamber.ai and put “Data rights request” in the subject line. We will check you are who you say you are and reply within thirty days. If a request is complicated and we need longer, up to sixty days, we will tell you inside the first thirty.

You can complain to the Information Commissioner’s Office, the UK supervisory authority for data protection. Tell us first if you would like us to try to put it right, but you do not have to.

ico.org.uk, 0303 123 1113, or Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.