This page explains the rights you have over your personal data under UK GDPR, EU GDPR, and the California Consumer Privacy Act (CCPA / CPRA), and how to exercise them with Runner Technology Ltd.

For the full picture of how we collect and process your data, see our Privacy Policy.

1. Who This Applies To

UK GDPR - if you are located in the United Kingdom.
EU GDPR - if you are located in the European Economic Area.
CCPA / CPRA - if you are a resident of California.

If your jurisdiction is not listed above, we still aim to honour the spirit of these rights and will work with you in good faith.

2. Your Rights Under UK GDPR and EU GDPR

Right	What it means	How to use it
Access	Get a copy of the personal data we hold about you.	Email us, or use the in-app export when available.
Rectification	Correct inaccurate or incomplete data.	Edit your profile in the app, or email us.
Erasure	Delete your account and personal data.	See the account deletion page.
Portability	Receive your data in a structured, machine-readable format.	Email us; we provide JSON by default.
Restriction	Ask us to pause processing while you contest accuracy or object.	Email us with the reason.
Objection	Object to processing based on legitimate interest.	Email us with the reason.
Withdraw consent	Where processing is based on consent, withdraw it at any time.	Toggle the relevant setting, or email us.
No automated decisions	Runner Technology Ltd does not make legally significant decisions about you by automated means.	Not applicable.

3. Your Rights Under CCPA / CPRA (California Residents)

Right	What it means
Right to Know	Request the categories and specific pieces of personal information we have collected, sources, purposes, and recipients.
Right to Delete	Request deletion of personal information we have collected, subject to legal exceptions.
Right to Correct	Request correction of inaccurate personal information.
Right to Opt Out of Sale or Sharing	We do not sell or share your personal information for cross-context behavioural advertising. There is nothing to opt out of.
Right to Limit Use of Sensitive Info	We do not use sensitive personal information for purposes beyond what is necessary to provide the Service.
Right to Non-Discrimination	We will not deny service, charge different prices, or provide a different level of quality because you exercised a CCPA right.

You may use an authorised agent to make requests on your behalf; we will verify the agent's authority before responding.

4. How to Submit a Request

Email [email protected] with the subject line "Data Subject Request" and include:

Your account email or phone number.
Which right you are exercising.
Any additional context that helps us identify the right account (for example, the business name on your account).

We may ask you to verify your identity before we act. Verification protects you from someone else requesting your data fraudulently.

5. Response Time

UK GDPR / EU GDPR: within 30 days. We may extend by a further 60 days for complex requests; we will tell you within the first 30 days if that happens.
CCPA / CPRA: within 45 days. We may extend by a further 45 days for complex requests; we will tell you within the first 45 days if that happens.

6. Cost

Data subject requests are free. We may charge a reasonable fee or refuse only where a request is manifestly unfounded or excessive (for example, repetitive identical requests).

7. Complaints and Supervisory Authorities

If you are unhappy with how we handle your request, you may lodge a complaint with the supervisory authority in your jurisdiction:

United Kingdom: Information Commissioner's Office (ICO).
European Economic Area: the data protection authority in your country of residence.
California: California Privacy Protection Agency or the California Attorney General.

8. Contact

Email [email protected]. We will acknowledge receipt within 5 business days.

Data Subject Rights