GDPR Compliance & Data Rights

Last Updated: December 2, 2025

1. Your Rights Under GDPR

ShockSet is committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. We have always had a robust and effective data protection program in place which complies with existing law and abides by the data protection principles. However, we recognize our obligations in updating and expanding this program to meet the demands of the GDPR.

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. ShockSet aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

In certain circumstances, you have the following data protection rights:

1.1 The Right to Access

You have the right to request copies of your personal data. We may charge you a small fee for this service.

1.2 The Right to Rectification

You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.

1.3 The Right to Erasure ("Right to be Forgotten")

You have the right to request that we erase your personal data, under certain conditions.

1.4 The Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

1.5 The Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

1.6 The Right to Data Portability

You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

2. Data Deletion Request

We understand that you may want to delete your account and all associated data. We have made this process simple and transparent.

How to Delete Your Data:

1. In-App Deletion:

   • Open the ShockSet App
   • Navigate to Settings > Account
   • Scroll to the bottom and tap Delete Account
   • Confirm your choice. This action is irreversible.

2. Email Request:

   • If you cannot access the app, you may submit a deletion request via email.
   • Send an email to [email protected] with the subject line "Data Deletion Request".
   • Please include the email address associated with your account.
   • We will process your request within 30 days.

3. Data Retention Policy

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

4. Data Protection Officer

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the details set out below.

Contact Details:

• Email: [email protected]
• Address: London, United Kingdom

5. Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.