Subject rights · UK GDPR

If we hold information about you, you have rights.

CLEARSKY is operated by 79th Unit Limited (CRN 17133814, ICO 00013660448). UK GDPR gives data subjects specific, enforceable rights. This page is the plain-English version. The legal version is in the privacy notice.

§01What you can ask for

Art. 15

Access

A copy of the personal data we hold about you, plus the source, the lawful basis, and who we have shared it with.

Art. 16

Rectification

Correction of inaccurate personal data. We will record both the correction and the original.

Art. 17

Erasure

Deletion where retention is no longer necessary or the lawful basis no longer applies. Limited where we have a legal obligation or substantial public-interest basis.

Art. 18

Restriction

Pause processing while a request is being adjudicated.

Art. 20

Portability

A machine-readable copy of personal data you have provided to us, where we process it by automated means.

Art. 21

Object

Object to processing on legitimate-interest grounds. We will reassess the lawful basis and either continue with documented justification or stop.

Art. 22

Automated decisions

CLEARSKY does not make solely automated decisions with legal or similarly significant effects without human review.

§02How to exercise these rights

If you believe you may be the subject of an investigation conducted using CLEARSKY, request a Receipt of Evidence at the subject portal. It is a three-step flow: identity submission, verification by one-time code (email or SMS), then download or status.

You can also email legal@79thunit.com with the same identity proof. The portal is faster.

Self-serve at the portal · 24h target response · one calendar month legal maximum

Request a Receipt of Evidence →

§03Receipt of Evidence: what you actually get back

A signed PDF receipt listing every record we hold about you, with per-event audit trail, lawful basis, and redaction reasoning. The receipt cover carries a public verifier URL. Anyone you share it with can confirm the receipt is authentic without an account.

  1. What we disclose

    Every voluntary processing event with timestamp, source, and lawful basis. Field-level redaction reasoning where redaction applies.

  2. What we do not redact

    We do not redact authority disclosures (court orders, regulatory inquiries) without a court order requiring us to.

  3. How identity is verified

    One-time code to a contact (email or SMS) we already hold against your record. If we cannot match the contact you provide, the request is forwarded to a human analyst who may ask for ID.

Start a request

§04Timeline

Our internal target is 24 hours from verified identity to first response. UK GDPR sets the legal maximum at one calendar month, extendable by two further months for complex requests, with notification.

§05Limits

We may refuse a request that is manifestly unfounded or excessive. If we do, we will explain why in writing, and you keep the right to complain to the ICO. The bar for refusal is high and we treat reaching for it as a defeat.

Where a third party's rights are engaged (for example, a witness statement obtained for litigation), we redact rather than refuse, and the receipt records the reasoning for each redaction.

§06Appeals and complaints

Every receipt carries an appeal route. If you disagree with our determination, you can appeal directly at the subject portal appeal page.

If the appeal is rejected, or you are not satisfied with our response, you have the right to escalate to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. Our ICO registration number is 00013660448.