Privacy requests
Tell us what you want and we will do it inside the statutory window. You do not need an account and you do not have to give a reason.
Version 1.0.0 Effective 2026-08-24 Last updated 2026-08-24
In short
Applies to: Data subjects and their regulators
- A form with a reference number rather than a shared inbox.
- Access, deletion, correction, portability, objection and opt-out.
- The statutory response times, stated on the form.
Before you fill this in
If you have an account, deleting a session and deleting the account are both self-service and take effect immediately. This form is for everything the account page cannot do, and for anyone without an account.
How long it takes
| Standard | When | What happens |
|---|---|---|
| UK GDPR and EU GDPR | One month from the day we receive it | Extendable by two months for a complex request, and we tell you inside the first month if we are extending |
| California Consumer Privacy Act | 45 days from the day we receive it | Extendable once by 45 days, with notice |
| Everywhere else | One month, because running two clocks produces two answers | The same |
The form
If you would rather write
The form gives you a reference number and the address does not. That is all that separates them. Either one reaches the same person.
privacy@tingvar.com
If we get it wrong
You can complain to your national data protection authority at any time, and you do not have to come to us first. In the UK that is the Information Commissioner's Office. In the EEA it is the supervisory authority of the country you live in. We would rather you told us first, because we can fix it faster than they can make us.