1. Our role and your rights
Zavia is operated by Global Data Intelligence Limited, a company registered in England and Wales under company number 09410808. Our registered office is Artisans’ House, 7 Queensbridge, Northampton, Northamptonshire, United Kingdom, NN4 7BF. Contact us at info@zavia.ai.
Data about a legal entity is not always personal data, but information identifying directors, owners, officers and business contacts can be. UK GDPR and, where applicable, EU GDPR protect that information. Our Privacy Policy explains the purposes, lawful bases, recipients and retention criteria. This page explains how to act on your rights.
Read the Privacy Policy2. Make a request
Email info@zavia.ai with the subject “Data rights request”. Tell us the right you want to exercise and enough information to locate the relevant account or record, such as your name, business, company identifier or report reference. You do not need a Zavia subscription, a legal representative or a prescribed form. Requests received through other valid channels are also recognised.
Please avoid sending unnecessary identity documents or other people’s personal data. If identity or authority needs checking, we will ask only for proportionate supporting information. An authorised representative may act for you.
Email a data rights request3. Rights available
| Right | What you can request |
|---|---|
| Access | Confirmation of processing, a copy of your personal information and relevant explanatory information. |
| Rectification | Correction of inaccurate personal information or completion of incomplete information. |
| Erasure | Deletion where the legal conditions apply; a request is not automatically overridden because a record is public. |
| Restriction | Limits on use, for example while accuracy or an objection is being assessed where the law requires. |
| Portability | A usable copy of information you supplied where processing is automated and based on consent or contract. |
| Objection | An objection to legitimate-interest processing based on your situation; an unconditional stop to direct marketing. |
| Withdraw consent | Withdrawal at any time for processing that relies on consent. |
| Automated decisions | Applicable safeguards, including meaningful human intervention and the opportunity to challenge a qualifying automated decision. |
4. Company records and source corrections
Send the affected record or report reference and explain what is inaccurate. Supporting evidence, such as a corrected filing, can help. We assess our own copy and any calculated relationship separately from the original source. We cannot amend a government register on your behalf; a registry correction may also require contacting the authority responsible.
An objection or erasure request is assessed against the particular purpose, lawful basis and any legal retention requirement. Where we must retain some information, we explain the reason and consider restriction or suppression. When required, we communicate corrections, erasure or restriction to recipients and provide information about those recipients. A marketing suppression record may be kept to prevent re-contact.
5. Response times and complaints
We respond without undue delay, normally within one calendar month. A lawful extension of up to two further months may be needed for complex or multiple requests; we will explain this within the initial period. Reasonable identity verification and any legally permitted clarification can affect the calculation of the deadline. Requests are normally free. Any refusal or exceptional fee must have a lawful basis, which we will explain.
Contact info@zavia.ai if you are dissatisfied with our handling. You may also complain directly to the UK ICO or an appropriate EU supervisory authority. Our process does not limit your right to a judicial remedy.
Make a complaint to the ICO6. Information for business customers
Receiving information from Zavia does not establish your own lawful basis for every downstream use. You must assess necessity, provide applicable notices, honour objections and comply with electronic-marketing rules. Human review and suitable impact assessments may be needed for consequential uses. A public registry source is not a blanket exemption from GDPR.
Where we handle personal data solely on your documented instructions, the agreed DPA governs. Where we supply our company intelligence and each party determines its own purposes, we are ordinarily separate controllers. Contractual labels do not override the actual processing roles.
Data-processing terms