Request your data

Make a request

You can always just email hello@actmorehuman.com and we will handle it exactly the same way. This form exists because it records the request: it stamps the date, names what you asked for, and gives you a reference you can quote back at us. An email leaves you trusting that we remembered; this leaves you holding proof.

What you can ask for

The rights below come from the GDPR and the UK GDPR, from California, Colorado, Connecticut, Virginia and the other United States privacy laws, from Canada's PIPEDA, and from Brazil's LGPD. We do not check which one covers you before deciding what to give you. Everyone gets the fullest version, because running two standards is how a company ends up defending the meaner one.

• A copy of your data. Everything we hold that is about you, in a file you can read.
• A correction. Tell us what is wrong and what it should say.
• Deletion. We remove what we hold, with the narrow exceptions below.
• Portability. A machine-readable export, to you or straight to another service.
• Restriction. We keep your data but stop using it while a dispute is open.
• Objection. Tell us which use you object to. If we rely on legitimate interests for it, we stop unless we can show a reason that outweighs yours.
• Withdrawal of consent. For anything we do only because you agreed to it. Withdrawing does not undo what was lawful before you withdrew.
• To know what we collect. The categories, where they came from, and who we share them with.

Two rights are not on the list because they do not arise here. There is no opt-out of sale or sharing to offer, because we do not sell personal information and do not share it for cross-context behavioural advertising — there is no advertising on this site at all. And there is no opt-out of automated decision-making, because we make no decision about you that has a legal or similarly significant effect. Ask anyway if you want that in writing.

What happens next

1. You submit the form. It returns a reference immediately — something like DR-20260906-K7QW3M — and emails you the same reference.
2. A person reads it. Not a queue and not a bot; the request lands in a channel a human watches.
3. If we need something to act — a different email address you might have signed up under, or which account you mean — we ask. That question does not restart the clock.
4. We answer within 30 days. The GDPR allows one month and California allows 45; we publish the shorter number and apply it to everybody, because two deadlines in one document is a promise nobody can check.
5. It costs nothing. We charge no fee for a first request, and we will not refuse one because it is inconvenient.

How we check it is you

We reply to the address on file. That is the check: if you ask from the email address we already associate with the data, the answer goes back to that address and nowhere else. If you ask from an address we do not recognise, we write and ask a question rather than sending your data to a stranger who typed your name.

We will not ask you to send a copy of your passport or driving licence. Collecting a government ID to prove a privacy request is collecting more data to honour a request about data, and for what we hold it is never proportionate.

The few things we cannot delete

A deletion request removes what we hold, with three narrow exceptions, all of which are obligations rather than choices.

• Payment and tax records. Invoices and the record of a transaction have a statutory retention period. We keep the record, not your writing.
• Fraud and abuse records. A minimal note that an address was blocked, so a deletion request cannot be used to reset a ban.
• Backups. Backups roll off on their own schedule. We do not restore a backup to reinstate deleted data, and the deletion is applied again if one is ever restored for another reason.

The retention schedule, column by column, is in the Privacy Policy.

Making a request for someone else

An authorised agent can make a request on someone's behalf, which several United States privacy laws provide for. Say so in the form and we will ask for written authorisation from the person the data is about, and confirm it with them directly before we act. A parent or guardian acting for a child under 16 is covered the same way.

If you are not satisfied

Tell us first — reply to the confirmation email quoting your reference, and a person will look at it again. If that does not resolve it, you have the right to complain to a regulator, and using it costs you nothing.

• European Economic Area: the data protection authority where you live or work.
• United Kingdom: the Information Commissioner's Office.
• Canada: the Office of the Privacy Commissioner of Canada.
• California: the California Privacy Protection Agency or the Attorney General.

The controller of your data is Fritter Factory Innovation Labs Inc., 1 Stan MacPherson Way, Unit 303, Charlottetown, PE C1A 0B4, Canada. Full contact details, and the German provider identification, are on the Impressum.