currenlu
currenlu

Your Data Rights

Your rights over your personal data and how to exercise them.

Last updated
23 October 2026

currenlu processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. On this page you will find an overview of your rights as a data subject, how to exercise them free of charge and whom to contact.

Who is responsible

The controller responsible for the processing of your personal data on currenlu.com is currenlu, 14 Cowley Court Lane, Oxford OX4 1DE, United Kingdom. You can reach us by email at hello@currenlu.com or by telephone on 01865 402 718. Requests concerning your data can be sent to this address at any time.

How to exercise your rights

To exercise any of these rights, a short message to hello@currenlu.com is sufficient. We may ask you to confirm your identity so that no one else can obtain your data. We respond within one month of receiving your request; in complex cases this period can be extended by two further months, and we will tell you if it is. Exercising your rights is free of charge.

Legal bases

We process personal data only where the law allows it: with your consent, to perform a contract or to take steps before entering into one, to comply with a legal obligation, or on the basis of our legitimate interest in operating a secure and functional website. Details for each processing activity can be found in our privacy policy.

Rights of data subjects

You may ask currenlu at any time which personal data about you we hold, for what purposes, for how long and with whom it has been shared, and you can obtain a copy of it (access). Incorrect or incomplete data will be corrected or completed at your request (rectification).

You can request the erasure of your data where it is no longer needed, where you withdraw your consent or where the processing is unlawful, and you can ask us to restrict processing while a dispute is being resolved. Where the processing is based on consent or a contract, you have the right to receive your data in a structured, machine-readable format (data portability).

Your right to object

Where we process your data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation; we will then stop unless there are compelling legitimate grounds. Consent you have given can be withdrawn at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Complaints

If you consider that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator. We would be grateful if you contacted us first, so that we can try to resolve the matter.

Transfers outside the UK

Some of our service providers may process data outside the United Kingdom. In that case we make sure that an adequate level of protection is guaranteed, for example through the UK adequacy regulations or the International Data Transfer Agreement. You can request a copy of these safeguards from us.