Last updated: July 19, 2026
Under the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA), and other applicable privacy laws, you have rights over the personal data we hold about you. This page explains those rights and how to exercise them.
Request a copy of the personal data we hold about you, including what data we have, why we have it, and who we share it with.
Submit Right of Access (SAR) →Request deletion of your personal data. We will erase it unless we are required to retain it by law (e.g. tax records) or for legitimate fraud-prevention purposes.
Submit Right to Erasure →Request correction of inaccurate or incomplete personal data we hold about you.
Submit Right to Rectification →Receive your personal data in a structured, commonly used, machine-readable format (e.g. JSON or CSV) so you can transfer it to another service.
Submit Right to Data Portability →Request that we limit how we process your data — for example, while you contest its accuracy or object to its use.
Submit Right to Restrict Processing →Object to processing of your data where we rely on legitimate interests as our lawful basis (e.g. analytics or fraud prevention).
Submit Right to Object →Where we rely on consent for any processing, you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing.
Submit Right to Withdraw Consent →You can exercise any of the above rights by emailing us at support@offlist.me with the subject line “Data Rights Request — [type of request]”.
Please include the following in your email:
We may need to verify your identity before processing your request to protect against fraudulent erasure or access requests.
| Regulation | Response Deadline |
|---|---|
| EU GDPR / UK GDPR | Within 30 calendar days (extendable by 2 months for complex requests with notification) |
| CCPA (California) | Within 45 days (extendable by 45 additional days with notice) |
| Our standard target | We aim to respond within 7 business days for most requests |
If you are not satisfied with our response, or believe we are processing your data unlawfully, you have the right to lodge a complaint with your relevant data protection authority:
Exercising your data rights is free of charge. We will only charge a reasonable fee if a request is manifestly unfounded or excessive (e.g. repetitive requests), in which case we will inform you in advance.
This page reflects OfflistMe's obligations under EU GDPR (Regulation 2016/679), UK GDPR and Data Protection Act 2018, the California Consumer Privacy Act (CCPA), and India's Digital Personal Data Protection Act 2023. Last reviewed July 2026.