GDPR Rights
Last updated: 15 November 2026
1. Your rights at a glance
Under Articles 15 to 22 of the GDPR you have the right to: • Access your personal data and get a copy (Art. 15). • Correct inaccurate or incomplete data (Art. 16). • Erasure, the right to be forgotten (Art. 17). • Restrict processing in certain cases (Art. 18). • Data portability: receive your data in a structured, machine-readable format (Art. 20). • Object to processing based on legitimate interests, and at any time to direct marketing (Art. 21). • Not be subject to decisions based solely on automated processing with legal or similar effects (Art. 22). We do not make such decisions. • Withdraw consent at any time, without affecting earlier lawful processing (Art. 7(3)).
2. Do it yourself, instantly
Sign in and open Settings > Privacy and your data to: • Download all your data as a file (access and portability). • Delete your account and content (erasure). • See your consent records. You can change your phone number and language in Settings, and update billing details in Manage billing. Use Cookie settings in the footer to change cookie consent.
3. Other requests
For anything you cannot do yourself (objection, restriction, correction of billing records, a data processing agreement, questions about transfers) contact RocketSavvy through the details published at rocketsavvy.com, with the subject "StoreWave privacy". We may ask you to confirm your identity, usually by replying from the account email, to protect your data from fraudulent requests.
4. How quickly we respond
We respond within one month. If a request is complex or numerous we may extend by up to two further months and will tell you why. Requests are free, unless they are manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse and explain why.
5. What we may keep after deletion
When you delete your account we erase your content and account data immediately. We must keep invoices, payment and credit-ledger records for accounting and tax law (7 years) and may keep limited data to defend legal claims. Those records are stored securely and used for these purposes only.
6. When we are your processor
If personal data of your staff or customers is contained in content you upload (for example a recorded promo), you are the controller and we are your processor under Article 28. Send such individuals' requests to us and we will help you respond. A data processing agreement is available on request.
7. Security incidents
If a personal data breach is likely to result in a risk to your rights we notify the competent supervisory authority within 72 hours (Art. 33) and, where the risk is high, you without undue delay (Art. 34).
8. International transfers
Your data is transferred to us in Canada under the European Commission's adequacy decision for Canada (Decision 2002/2/EC), and to our suppliers under the EU-US Data Privacy Framework or Standard Contractual Clauses. You may ask us for details of the safeguards.
9. Complaints
You may complain to a supervisory authority, in particular in the EU country where you live or work or where an infringement occurred. In Greece this is the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα, dpa.gr). In Canada you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca). We would appreciate the chance to resolve your concern first.