Request Form – Data Rectification
Your Right to Data Rectification under GDPR
Under the General Data Protection Regulation (GDPR), you have the right to have your data rectified where it is inaccurate or incomplete. You can make the request by using this form.
Response Time
- Shufti Pro will respond to your request within one month.
- For complex requests, the timescale for response may be extended from one month to three months. You will be informed within one month of receipt of the request and provided the reason for the extension.
Data Restriction
Shufti Pro will take steps to restrict the use of your data whilst it verifies whether the data is inaccurate.
Processing Circumstances
Your request will be processed in only one of the following circumstances:
A. Where data is controlled directly by Shufti Pro (e.g.,
subscribers,employees,etc.).
B. Where the data is controlled by a Client of Shufti Pro (e.g., in
situations where
Shufti Pro has carried out verification and/or KYC services on behalf of the Client).
Note for Clients' Controlled Data
For those whose data is controlled by Client and Shufti Pro performs verification services: Please note that any and all requests pertaining to rectification of data will be finally settled by the Controller and are subject to their approval. Any decision we receive from them shall be conveyed to you promptly.
No Action Response
If the response to your request is that the Shufti Pro will take no action, you will be informed of the reasons for this and of your right to complain to the Information Commissioner’s Office (ICO) and to a judicial remedy.
Response Timeframe
We will do our best to respond promptly and in any event within one month of the following:
- Our receipt of your written request; or
- Our receipt of any further information we may ask you to provide to enable us to comply with your request, whichever happens to be later.
Data Usage
Please further note that the information provided shall only be used for this request of data rectification. Any information you provide us through this form will be used for tracking the data. Using this structure, your users can easily navigate the text and understand their rights and the process of data rectification.
Request Form – Data Deletion Request
Under the General Data Protection Regulation (GDPR), you have the right to request to have your personal data deleted or removed from our systems. You can make the request by using this form.
You have the right to have your personal data deleted in the following circumstances (please specify in the form):
- Where you feel your personal data is no longer necessary for the purposes for which we originally collected it;
- Where you no longer consent to our processing of your personal data;
- Where you object to our processing of your personal data as is your right under Article 21 of the GDPR;
- Where you feel your personal data has been unlawfully processed;
- Where you feel we are subject to a legal obligation that requires the erasure of your personal data;
- Where you are a child, you represent a child, or you were a child at the time of the data processing and you feel your personal data was used to offer you information society services.
Data Restriction
Shufti Pro will take steps to restrict the use of your data whilst it verifies whether the data is inaccurate.
Processing Circumstances
Your request will be processed in only one of the following circumstances:
A. Where data is controlled directly by Shufti Pro (e.g., in the case of
subscribers, employees, etc.).
B. Where the data is controlled by a Client of Shufti Pro (e.g., in
situations where Shufti Pro has carried out verification and/or KYC services on behalf of the Client).
For those whose data is directly controlled by Shufti Pro (subscribers and employees, etc.): Where Shufti Pro does not need to possess the data further for any interests or use, it may delete the data and entirely remove it from the system.
For those whose data is controlled by a Client and Shufti Pro performs verification services: Please note that any and all requests pertaining to deletion of data will be finally settled by the Controller and are subject to their approval. Any decision we receive from them shall be conveyed to you promptly. If the Controller agrees, your data will be completely deleted and removed from the system. In the event the Controller refuses for whatever legitimate interests they may cite, you will be kindly directed to contact the Controller.
We will do our best to respond promptly and in any event within one month of the following:
- Our receipt of your written request; or
- Our receipt of any further information we may ask you to provide to enable us to comply with your request, whichever happens to be later.
Please further note that the information provided shall only be used for this request of data deletion. Any information you provide us through this form will be used for tracking the data.
Please note that in certain circumstances, we may not be able to erase the information you requested in accordance with Article 17(3) of the GDPR, where erasure may, would, or could:
- Contradict a legal obligation owed to our clients;
- Fulfill any regulatory compliance(s) under regulatory law;
- Prohibit the establishment of a legal defense or exercise of other legal claims.
In such cases, you will be informed promptly with the reasons.
Request Form – Data Subject Access
Your Subject Access Rights
You are entitled to know what information we hold, share, or use about you. In order to deal with your request, we may ask for proof of identity and ask you to provide us with enough information to enable us to locate the personal data that you request.
Your request will be processed in only one of the following circumstances:
A. Where data is controlled directly by Shufti Pro (e.g., in the case of
subscribers, employees, etc.).
B. Where the data is controlled by a Client of Shufti Pro (e.g., in
situations where Shufti Pro has carried out verification and/or KYC services on behalf of the Client).
For those whose data is controlled by a Client and Shufti Pro performs verification services: Please note that any and all requests pertaining to access to data will be finally settled by the Controller and are subject to their approval. Any decision we receive from them shall be conveyed to you promptly. If the Controller agrees, your data will be provided to you. In the event the Controller refuses for whatever legitimate interests they may cite, you will be kindly directed to contact the Controller.
The purpose of this form is to ensure that all the necessary information to complete your request is provided to us. You will not usually need to pay a fee to access your personal data; however, if the subject request is manifestly unfounded, excessive, or repetitive, then we may either refuse to grant your request, by giving you a reason thereof, or charge a reasonable fee for complying with your request.
When you are requesting information on behalf of someone else, please provide proof that you are authorized and fully consented to access such information.
Please complete this form and return it to us with proof of your identity. We will acknowledge safe receipt of your request and respond with the requested information within either one (1) month, or three (3) months, with an explanation of the reason why such extension is necessary if the request is complex. We will endeavor to respond promptly and in any event within one month of the latest of the following:
- Our receipt of your written request; or
- Our receipt of any further information we may ask you to provide to enable us to comply with your request.
Please further note that the information provided shall only be used for this request of data subject access. Any information you provide us through this form will be used for tracking the data.
