Subject to certain limitations and exceptions, if you are in the European Economic Area, you have the following rights under the GDPR:   Access to personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. Correction of personal data.  This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. Request erasure of personal data. This enables you to ask us to delete personal data when there is no good reason for us continuing to process it. You also have the right to ask us to delete your personal data when you have successfully exercised your right to object to processing (see below), when we may have processed your information unlawfully or when we are required to erase your personal data to comply with applicable law. Restriction of processing personal data.  This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) when our use of personal data is unlawful, but you do not want us to erase it; (c) when you want us to hold personal data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of personal data, subject to our  verifying whether we have an overriding legitimate interest to continue using it. Request transfer of personal data. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.   Right to withdraw consent. You can withdraw your consent at any time when we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.