Your Data Rights (UK GDPR)
Your rights over your personal data and how to exercise them.
- Last updated
- 18 October 2026
curtainvoxa processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. On this page you will find an overview of your rights as a data subject, how to exercise them free of charge and whom to contact.
Who is responsible
Responsible for data processing within the meaning of the UK GDPR is curtainvoxa, located at 14 Quay Lane, Exeter EX2 4AN, United Kingdom. For every question about your personal data, please write to [email protected] or call us on 01392 204 817.
Your rights
You have the right to obtain confirmation as to whether we process personal data about you and, if so, to receive a copy of it together with information about the purposes, the recipients and the storage period (right of access). You may ask us to correct inaccurate data and to complete incomplete data (right to rectification).
You can request the erasure of your data where it is no longer needed, where you withdraw your consent or where the processing is unlawful, and you can ask us to restrict processing while a dispute is being resolved. Where the processing is based on consent or a contract, you have the right to receive your data in a structured, machine-readable format (data portability).
Your right to object
Where we process your data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation; we will then stop unless there are compelling legitimate grounds. Consent you have given can be withdrawn at any time, without affecting the lawfulness of processing carried out before the withdrawal.
How to exercise your rights
Please send your request by email to [email protected] or by post to 14 Quay Lane, Exeter EX2 4AN. To protect your data, we may ask for information that confirms your identity. You will receive an answer within one month, and no fee is charged unless a request is manifestly unfounded or excessive.
Legal bases
Every processing activity on curtainvoxa.com rests on one of the legal bases of the UK GDPR: consent, the performance of a contract, a legal obligation or a legitimate interest that is not overridden by your interests. Our privacy policy lists which basis applies to which purpose.
Right to lodge a complaint
If you consider that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator. We would be grateful if you contacted us first, so that we can try to resolve the matter.
Transfers outside the UK
Some of our service providers may process data outside the United Kingdom. In that case we make sure that an adequate level of protection is guaranteed, for example through the UK adequacy regulations or the International Data Transfer Agreement. You can request a copy of these safeguards from us.