GDPR Compliance
InvestinK takes data protection seriously. This page explains how we comply with the General Data Protection Regulation (GDPR) and UK GDPR, and outlines your rights as a data subject.
Data Controller
InvestinK acts as the data controller for personal data collected via investink.co. To exercise your rights or raise concerns, use our legal contact form.
Your Rights Under GDPR
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data ("right to be forgotten").
Ask us to limit how we use your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests.
Withdraw consent at any time without affecting prior processing.
Lodge a complaint with your national supervisory authority.
Legal Basis for Processing
We process contact form submissions on the basis of your explicit consent (Article 6(1)(a) GDPR). We process security data (IP addresses, timestamps) on the basis of legitimate interests in preventing spam and abuse (Article 6(1)(f) GDPR).
Data Transfers
Your data is stored on servers located within [your hosting country — update this]. We do not transfer personal data to third countries without appropriate safeguards.
Supervisory Authorities
If you are based in the EU or UK and believe your rights have been violated, you may lodge a complaint with:
- UK: Information Commissioner's Office (ICO) — ico.org.uk
- EU: Your national Data Protection Authority — edpb.europa.eu/about-edpb/about-edpb/members
Exercising Your Rights
To exercise any of the rights listed above, please submit a request via our legal contact form. We will respond within 30 days as required by GDPR. Identity verification may be required before we can process your request.