GDPR & YOUR DATA RIGHTS

This page summarises your rights under the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and the Data Protection Act 2018, and explains exactly how to exercise them with The Wanted 2.0. It complements — and should be read alongside — our full Privacy Policy.

1. Data controller

For data collected through this website, The Wanted 2.0is the data controller. To make a data rights request, contact us via the form on our booking page with the subject line "Data request".

2. What personal data we hold

Depending on how you've interacted with the Site, we may hold:

• Mailing list data: email address, phone number, country code, Instagram handle, marketing-consent flag and timestamp, signup source, and the user-agent of the browser you signed up from.
• Booking inquiry data: the name, company, email, phone, event type, date, location and message you sent through the booking form.
• Technical logs: short-lived hosting logs containing IP address, browser type and request metadata for security and performance.

We do not sell your data, and we do notuse it for automated decision-making or profiling that produces legal or similarly significant effects.

3. Your rights

a) Right to be informed

You have the right to clear, plain-language information about how we use your data. That's what this page and our Privacy Policy are for.

b) Right of access (Subject Access Request)

You can ask for a copy of the personal data we hold about you. We will respond within one calendar month of receiving a valid, identity-verified request.

c) Right to rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct or complete it.

d) Right to erasure ("right to be forgotten")

You can ask us to delete your personal data where one of the legal grounds applies — for example, where you withdraw consent and we have no other lawful basis to keep the data.

e) Right to restrict processing

You can ask us to limit how we use your data — for example, while we check the accuracy of data you've challenged.

f) Right to data portability

For data you have provided to us based on consent or a contract, and which we process by automated means, you can ask us to provide it in a structured, commonly used, machine-readable format (e.g. JSON or CSV).

g) Right to object

You can object to our processing where we rely on legitimate interests, and you have an absolute right to object to any processing for direct marketing — including unsubscribing from our mailing list.

h) Rights related to automated decision-making

We do not use your personal data to make automated decisions that produce legal or similarly significant effects on you.

i) Right to withdraw consent

Where we rely on your consent (for example, marketing emails or SMS), you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

4. How to make a request

To exercise any of the rights above:

• Send a message via our booking page with the subject line "Data request".
• Tell us which right you want to exercise (access, correction, deletion, etc.).
• Include the email address, phone number or Instagram handle you originally signed up with so we can locate your record.
• We may ask for additional information to confirm your identity before acting on the request — this is to protect your data from unauthorised disclosure.

Most requests are free of charge. If a request is manifestly unfounded or excessive (for example, repetitive), we may charge a reasonable fee or refuse to act, in line with the law.

5. Quick unsubscribe

For marketing-only opt-outs you don't need a formal request:

• Email: click the "unsubscribe" link in the footer of any marketing email.
• SMS: reply STOP to any marketing text message.
• Or send us a message via the booking page asking to be removed.

6. International transfers

Some of our service providers may store or process data outside the UK and EEA. Where this happens we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision.

7. Data retention

We keep mailing list data until you unsubscribe or ask us to delete it; booking inquiries for as long as is reasonably needed; and technical logs for short periods only. See the Privacy Policy for details.

8. Complaints

We hope to resolve any concerns directly. If you're not satisfied with our response, you have the right to lodge a complaint with a supervisory authority:

• United Kingdom — Information Commissioner's Office (ICO).
• European Union / EEA — the data protection authority in the country where you live, work, or where the alleged infringement took place. A list is available on the European Data Protection Board website.

9. Changes to this page

We may update this page as our processes evolve. The "last updated" date at the top reflects the most recent version.