Your GDPR Rights

1. Right of Access

You can request a copy of all personal data we hold about you. This is called a Subject Access Request (SAR). We will respond within one month.

How to use: Email us at support@cityhavenpro.com with "Subject Access Request" in the subject line.

2. Right to Rectification

If your personal data is wrong or out of date, you can ask us to correct it. We will update our records promptly.

How to use: Contact us with details of what needs correcting. We may ask for proof of the correct information.

3. Right to Erasure (Right to be Forgotten)

You can ask us to delete your personal data in certain cases. This includes when:

• The data is no longer needed for its original purpose
• You withdraw consent (where consent was the basis)
• You object to processing and we have no overriding reason
• The data was processed unlawfully

Note: We may need to keep some data for legal reasons (e.g., financial records for 7 years).

4. Right to Restrict Processing

You can ask us to limit how we use your data. This applies when:

• You dispute the accuracy of the data
• Processing is unlawful but you don't want deletion
• We no longer need it but you need it for legal claims
• You've objected and we're checking if we have grounds to continue

5. Right to Data Portability

You can ask for your data in a common, machine-readable format (like CSV or JSON). You can also ask us to send it directly to another service where possible.

This applies to data you provided and that we process by consent or contract.

6. Right to Object

You can object to processing based on:

• Legitimate interests: We must stop unless we have compelling grounds
• Direct marketing: We must stop immediately, no exceptions
• Research or statistics: Unless it's in the public interest