GDPR Compliance

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

1. Right of Access (Article 15)

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and information including:

• The purposes of the processing
• The categories of personal data concerned
• The recipients or categories of recipients to whom the personal data have been or will be disclosed
• The envisaged period for which the personal data will be stored
• Your right to request rectification, erasure, or restriction of processing

2. Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete personal data completed. You can update your account information at any time through your account settings, or contact us to request corrections.

3. Right to Erasure ("Right to be Forgotten") (Article 17)

You have the right to request the deletion of your personal data when:

• The personal data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal ground for processing
• You object to processing and there are no overriding legitimate grounds
• The personal data has been unlawfully processed
• The personal data must be erased to comply with a legal obligation

To request deletion, please contact us at support@reeliciousai.com. Note that we may retain certain data where required by law or for legitimate business purposes.

4. Right to Restriction of Processing (Article 18)

You have the right to restrict the processing of your personal data in certain circumstances, such as when:

• You contest the accuracy of the data
• The processing is unlawful and you oppose erasure
• We no longer need the data, but you require it for legal claims
• You have objected to processing pending verification of legitimate grounds

5. Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. You can export your data through your account settings or by contacting us.

6. Right to Object (Article 21)

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. You can opt-out of marketing communications at any time through your account settings or by clicking unsubscribe in our emails.

7. Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. While we use AI for content generation and analytics, we do not make automated decisions that produce legal effects without human intervention.

8. Right to Withdraw Consent (Article 7)

Where processing is based on consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

How We Process Your Data

Legal Basis for Processing (Article 6)

We process your personal data based on the following legal bases:

• Contractual necessity: To provide and perform our services as agreed in our Terms of Service
• Legitimate interests: To improve our services, prevent fraud, ensure security, and for analytics
• Consent: For marketing communications and optional features (you can withdraw at any time)
• Legal obligation: To comply with applicable laws and regulations

Data Minimization (Article 5)

We only collect and process personal data that is necessary for the purposes for which it is processed. We regularly review and minimize the data we collect.

Data Security (Article 32)

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and updates
• Staff training on data protection
• Incident response procedures

Data Retention (Article 5)

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• For the duration of your account and subscription
• As required by law or regulatory obligations
• For legitimate business purposes (e.g., dispute resolution, fraud prevention)

When data is no longer needed, we securely delete or anonymize it.

International Data Transfers (Chapter V)

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by GDPR

Data Protection Officer

If you have questions or concerns about our data processing practices, or wish to exercise your rights, please contact us:

Right to Lodge a Complaint (Article 77)

If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you habitually reside, work, or where the alleged infringement occurred.

In the UK, you can contact:

Updates to This Notice

We may update this GDPR notice from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes and update the "Last updated" date.

Additional Information

For more details about how we collect, use, and protect your personal data, please see our Privacy Policy.