1. Who this applies to
This notice supplements our main Privacy Notice and applies to anyone whose personal data is processed by NextPayment in the European Economic Area. It sets out the rights granted to you under the EU General Data Protection Regulation.
2. Your rights
You have the right to:
- Access the personal data we hold about you and receive a copy.
- Request rectification of inaccurate or incomplete information.
- Request erasure where one of the statutory grounds applies.
- Restrict the processing of your data in certain circumstances.
- Object to processing based on our legitimate interests.
- Receive your data in a portable, machine-readable format.
- Withdraw consent at any time where processing is based on consent.
3. How to make a request
Submit requests through privacy@nextpayment.com or via the in-app privacy centre. We verify your identity using information already associated with your account and respond within one calendar month, extendable by a further two months for complex requests.
4. Supervisory authority
If you believe we have handled your data incorrectly you have the right to lodge a complaint with the data protection authority of your EU member state of residence.