- Last updated
- 24 October 2026
journylo processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. On this page you will find an overview of your rights as a data subject, how to exercise them free of charge and whom to contact.
Controller
Responsible for data processing within the meaning of the UK GDPR is journylo, located at 14 Cooper Mews, Oxford OX2 6HT, United Kingdom. For every question about your personal data, please write to [email protected] or call us on 01865 430172.
How to exercise your rights
To exercise any of these rights, a short message to [email protected] is sufficient. We may ask you to confirm your identity so that no one else can obtain your data. We respond within one month of receiving your request; in complex cases this period can be extended by two further months, and we will tell you if it is. Exercising your rights is free of charge.
Legal bases
We process personal data only where the law allows it: with your consent, to perform a contract or to take steps before entering into one, to comply with a legal obligation, or on the basis of our legitimate interest in operating a secure and functional website. Details for each processing activity can be found in our privacy policy.
Your rights
You have the right to obtain confirmation as to whether we process personal data about you and, if so, to receive a copy of it together with information about the purposes, the recipients and the storage period (right of access). You may ask us to correct inaccurate data and to complete incomplete data (right to rectification).
You can request the erasure of your data where it is no longer needed, where you withdraw your consent or where the processing is unlawful, and you can ask us to restrict processing while a dispute is being resolved. Where the processing is based on consent or a contract, you have the right to receive your data in a structured, machine-readable format (data portability).
Complaints
If you consider that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator. We would be grateful if you contacted us first, so that we can try to resolve the matter.
Your right to object
Where we process your data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation; we will then stop unless there are compelling legitimate grounds. Consent you have given can be withdrawn at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Transfers outside the UK
Some of our service providers may process data outside the United Kingdom. In that case we make sure that an adequate level of protection is guaranteed, for example through the UK adequacy regulations or the International Data Transfer Agreement. You can request a copy of these safeguards from us.