Data Rights Request Procedure

Effective Date: 8 May 2026 · Version 1.0

This procedure explains how you can exercise your data protection rights as a Vyete user. Vyete Technologies Ltd ("Vyete") is committed to honouring these rights promptly and transparently in accordance with applicable data protection law.

1. Rights Available to You

Depending on your location, you may have some or all of the following rights regarding your personal data:

| Right | What It Means | |---|---| | Access | Obtain a copy of the personal data Vyete holds about you | | Rectification | Correct inaccurate or incomplete personal data | | Erasure | Request deletion of your personal data ("right to be forgotten") | | Restriction | Ask Vyete to limit how it processes your data in certain circumstances | | Portability | Receive your data in a structured, machine-readable format | | Objection | Object to processing based on legitimate interests or for direct marketing | | Automated decisions | Request human review of decisions made solely by automated processing |

2. How to Submit a Request

Tip

The fastest way to exercise your rights is through your account dashboard. Dashboard requests are typically processed within 10 business days — faster than email or postal routes.

Go to id.vyete.com and sign in to your account.

Open Privacy settings

Navigate to Account → Privacy → Data Requests.

Select the right you wish to exercise

Choose from: Access, Rectification, Erasure, Restriction, Portability, or Objection. Provide any additional context in the description field.

Verify your identity

Complete the identity verification step (email confirmation link, or document upload for high-sensitivity requests).

Receive acknowledgement

Vyete will acknowledge your request within 3 business days and provide a reference number. Keep this for follow-up.

Alternative: Email Request

You may also submit a request by email to [email protected]. Include:

Your full name.
The email address associated with your Vyete account.
A clear description of the right you wish to exercise.
Any relevant details (e.g., the specific data categories you are requesting).

Alternative: Postal Request

Written requests may be sent to Vyete Technologies Ltd, Data Protection Officer, [Registered Address]. Postal requests may take longer to process.

3. Identity Verification

To protect your data, Vyete must verify your identity before processing any request. The level of verification depends on the sensitivity of the request:

Standard requests (access, portability): Verification via your registered email address or account confirmation link.
High-sensitivity requests (erasure, rectification of financial data): Additional identity document or account authentication may be required.

Vyete will not action a request until identity is confirmed. If verification fails, Vyete will notify you within 5 business days.

4. Response Timeframes

| Stage | Timeframe | |---|---| | Acknowledgement | Within 3 business days of receipt | | Identity verification | Within 5 business days | | Full response | Within 30 calendar days of receipt | | Complex requests | Up to 90 calendar days (we will notify you of any extension within 30 days) |

Vyete aims to respond faster than these limits in most cases. Requests received through the dashboard are typically processed within 10 business days.

5. Erasure Requests

5.1 When Erasure Applies

Vyete will erase your personal data when:

It is no longer necessary for the purpose it was collected.
You withdraw consent and there is no other legal basis for processing.
You successfully object to processing.
The data has been unlawfully processed.

5.2 When Erasure Cannot Be Fulfilled

Vyete may retain data despite an erasure request where retention is necessary for:

Compliance with a legal obligation (e.g., financial record-keeping requirements).
Establishing, exercising, or defending legal claims.
Fraud prevention and platform integrity purposes.
Completion of an in-progress transaction or dispute.

Vyete will explain which data cannot be erased and the legal basis for retention.

5.3 Effect on Your Account

An erasure request for your core account data will result in account closure. Vyete will confirm this before proceeding.

6. Portability

Where your right to data portability applies, Vyete will provide your personal data in a structured, commonly used, and machine-readable format (JSON or CSV). The export will include:

Profile information
Order history
Review and rating history
Saved addresses and preferences

Processing time for a full data export is up to 14 calendar days after verification.

7. Objection to Direct Marketing

You may object to your personal data being used for direct marketing at any time. This can be done:

In your account under Notifications → Marketing Preferences.
By emailing [email protected].
By using the unsubscribe link in any marketing communication.

Opt-out requests for marketing are processed within 5 business days. Note that transactional communications (order confirmations, security alerts) are not affected.

8. Exemptions and Limitations

Your rights are not absolute. Vyete may refuse or limit a request where:

It is manifestly unfounded or excessive (Vyete will explain why and may charge a reasonable fee).
Fulfilling it would adversely affect the rights of another person.
It conflicts with a legal obligation or court order.
The data was collected for solely journalistic, academic, or public-interest purposes.

Where Vyete refuses a request, it will provide the reasons in writing within 30 calendar days.

9. Complaints

If you are dissatisfied with Vyete's response to a data rights request, you may:

Escalate internally via [email protected], referencing your original request.
Contact your national data protection authority (e.g., the ICO in the United Kingdom, the DPC in Ireland).

Vyete is committed to resolving data protection concerns and will cooperate with any regulatory investigation.

10. Contact

All data rights requests and privacy enquiries: [email protected]

Data Protection Officer: [email protected]