Legal document

Data Rights and Requests

Last updated: October 23, 2026 · English · Revision 2026-10-23

Access, correction, erasure, objection, portability and data protection complaints.

Principal contractual language: English. Mandatory local rights remain protected.

ICO Data Protection Register No: ZC276849
Permanent copy of this revision

1. How to make a request

Contact iletisim@wuubi.com or use the relevant account setting. State the right you wish to exercise and enough information to locate your records. You can use ordinary language. You do not have to accept new terms, keep an active subscription or use a special form. If access to your account is unavailable, contact us by email or at Wuubi Labs Ltd., 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom.

We use proportionate verification and ask for additional identity information only where needed. Do not send a passport or other sensitive identification unless a justified, secure verification process has been explained. Requests by a representative or guardian require appropriate authority; a guardian does not automatically receive every private message of a young person.

2. Available rights

Subject to applicable conditions, rights include access and a copy, correction, erasure, restriction, portability, objection and withdrawal of consent. Under the KVKK you may learn whether information is processed, the purpose and recipients, request correction or deletion and notification to recipients, object to an adverse result arising solely from automated analysis, and seek compensation for unlawful processing.

The right to object to legitimate-interest processing is assessed against your particular situation and any compelling grounds or legal claims. Optional analytics and diagnostics can be withdrawn separately. Portability applies where the relevant legal conditions are met; it is not a right to receive another person’s confidential information, passwords or security secrets.

3. Downloading and deleting information

The account download tool provides a machine-readable archive through an authenticated, time-limited download. Files expire 14 days after completion. A self-service cooldown does not replace or limit a statutory access request. We assess the full request and protect other people’s rights, using redaction where appropriate rather than refusing an entire request without reason.

Ordinary account closure offers a 30-day cancellation period. A statutory erasure request can proceed separately without that delay. Personal submissions are removed; legitimately retained editorial publications require publication rights and appropriate treatment of personal information. Necessary accounting evidence and scoped legal holds may remain with an explained reason. Backups are isolated, rotate within 30 days and are subject to reapplication of erasures on restore.

4. Timing, outcome and complaints

UK GDPR rights requests are normally answered within one calendar month. We explain any lawful extension, identity check or clarification-related pause and the applicable deadline. KVKK applications are answered as soon as possible and within 30 days under the applicable rules. Requests are normally free; any lawful charge or refusal requires an explained basis.

A data protection complaint is a distinct process: we acknowledge it within 30 days, investigate appropriately and communicate the outcome without undue delay. If dissatisfied, you may use the UK ICO complaint process or, where applicable, the Turkish Personal Data Protection Board process. Applicable prior-application and time-limit requirements still apply. These channels do not remove access to courts or other mandatory remedies.

Legal navigation

Terms, privacy, cookie and other legal documents are available from the legal index.