Skip to content
Legal

Your GDPR & UK GDPR rights

Effective · 24 April 2026Last updated · 24 April 2026
The short version. If you're in the EU, UK, EEA, or Switzerland, you have eight rights over the data we hold about you. This page explains each one in plain English and how to use it. We respond within 30 days, free of charge, and we'd rather help you directly than have you go to a regulator.

1. Who this page is for

This page summarises the rights you have under the EU General Data Protection Regulation (GDPR) and the UK GDPR (as amended by the Data (Use and Access) Act 2025). We voluntarily extend the same rights to all Veyago users worldwide, as a matter of policy.

For the full detail of what data we collect and why, see our Privacy Policy.

2. Your eight rights, in plain English

2.1 The right to be informed

You have the right to know, in clear language, what data we collect, why, how long we keep it, and who we share it with.

Read our Privacy Policy — that's what it's for. If anything is unclear, email hello@veyago.app and we'll explain it.

2.2 The right of access (Article 15)

You have the right to a copy of the personal data we hold about you, and information about how we use it.

How to use it. Email hello@veyago.app from the address on your account, or use the Export my data button in Settings.

What you get. A machine-readable JSON file containing your account data, preferences, swipe history, group session participation, subscription status, and Explorer Map data (if enabled). We'll include a short summary explaining what each field means.

How long it takes. Within one month of a valid request.

2.3 The right to rectification (Article 16)

You have the right to correct inaccurate or incomplete personal data.

How to use it. Most fields are editable in Settings. For anything you can't edit yourself, email hello@veyago.app.

2.4 The right to erasure — "the right to be forgotten" (Article 17)

You have the right to have your personal data deleted.

How to use it. Tap Delete my account in Settings, or email hello@veyago.app.

What happens. Your account becomes immediately inaccessible. Within 30 days we delete your data from active systems, and within 60 days from backups. Some data we're legally required to keep for longer — tax records (7 years), certain fraud prevention logs — we keep the minimum required and nothing else.

Limits. We can decline erasure where we have a legal obligation to keep data, where processing is necessary for establishing or defending legal claims, or where other specific GDPR exemptions apply. If we decline, we'll tell you why.

2.5 The right to restrict processing (Article 18)

You have the right to tell us to pause using your data while we sort something out — for example, while we check whether data is accurate, or while we consider an objection.

How to use it. Email hello@veyago.app explaining what you'd like restricted and why. During a restriction we store the data but don't otherwise process it.

2.6 The right to data portability (Article 20)

For the data you've given us, you have the right to receive it in a structured, commonly used, machine-readable format and to ask us to send it to another service where technically feasible.

Format. We export as JSON. We can provide CSV for specific subsets (for example, your travel footprint) on request.

How to use it. Email hello@veyago.app or use the Export my data button in Settings.

2.7 The right to object (Article 21)

You have the right to object to processing based on our legitimate interests, and an absolute right to object to direct marketing.

How to use it. For marketing emails, click Unsubscribe in any email. For analytics (PostHog), open Cookie settings (website) or Privacy (app) and turn off analytics. For other legitimate-interest processing, email hello@veyago.app explaining which processing you're objecting to.

What happens for marketing. We stop immediately.

What happens for other processing. We assess your objection against our legitimate interests. If yours outweighs ours, we stop; if not, we tell you why.

2.8 Rights in relation to automated decisions and profiling (Article 22)

You have the right not to be subject to a decision based solely on automated processing — with no human in the loop — that produces legal or similarly significant effects on you.

What this means for Veyago. We don't make that kind of decision. Our destination matching and AI itinerary features are suggestions; you decide what to do with them. If that ever changes, we'll tell you in advance and give you the right to human review, to express your view, and to contest the outcome.

3. Two more important rights

  • Right to withdraw consent (Article 7(3)) — where we rely on your consent (analytics, marketing, Explorer Map, AI itinerary), you can withdraw it at any time. Withdrawal doesn't affect the lawfulness of processing before you withdrew.
  • Right to lodge a complaint (Article 77) — you can complain to a data protection authority at any time. See Section 6 below.

4. How we handle your requests

Email us. We respond within 30 days. It's free. We may need to verify it's really you.

Response time. Within one month of receipt. For complex or numerous requests we may extend by up to two additional months, in which case we'll tell you within the first month and explain why.

Cost. Free, unless your request is manifestly unfounded or excessive (for example, repetitive), in which case we may charge a reasonable administrative fee or decline. We'll explain any refusal.

Identity verification. To stop someone else pretending to be you, we may ask for information that matches what we have on file. We ask for the minimum we need.

No retaliation. Exercising any of these rights will not cause us to degrade your service, charge you more, or treat you differently.

5. If we refuse a request

We'll explain why, in writing, and tell you how to appeal internally (reply to our response) and externally (to a supervisory authority). If we rely on an exemption, we'll identify it.

6. Your right to complain to a regulator

You can complain directly to a data protection authority in your country. In the UK you must first raise the issue with us and wait up to three months before complaining to the ICO.

Belgium (our lead authority):

United Kingdom:

  • Information Commissioner's Office (ICO)
  • Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
  • Helpline: 0303 123 1113 (UK) / +44 1625 545 745 (international)
  • Website: ico.org.uk

Elsewhere in the EU/EEA: your national supervisory authority — list at edpb.europa.eu.

We're registered in Belgium, so the Belgian DPA is our lead supervisory authority under the GDPR one-stop-shop mechanism.

7. Contact us first

Most things we can sort out directly. Email hello@veyago.app and a real person will reply.