Data rights

Data Subject Access Request.

You have the right to know what personal information we hold about you and to receive a copy. This form starts a formal DSAR with our security and privacy team.

Standard frameworks. We handle requests under the Privacy Act 1988 (Cth), GDPR / UK GDPR, CCPA, PIPEDA, and equivalents.

Identity verified first. We won't release records until we're certain you are who you say you are — usually a photo-ID match plus account signals.

Encrypted delivery. Data is delivered as a password-protected archive over an encrypted channel. The password comes via a separate channel.

What we'll send. Your account profile, content you've created, audit logs of your actions, and metadata we've attached to your records — unless legally restricted (e.g. fraud-related signals).

Need a workspace export?. For data portability or transferring ownership, the data transfer flow is purpose-built for it.

Request transfer

Want it deleted instead?. Lodge a right-to-erasure request and we'll walk you through what's deletable vs. legally retained.

Request deletion

Privacy questions. For policy-level questions (not a specific request), email the security team directly.

security@newhorizoncode.io