Your Privacy Choices: Opt-Out, Access & Deletion

#

Email [email protected] and tell us what you would like us to do: opt out, access, delete or correct. For device data, include the device’s advertising ID. Platform users should write from the email address on their account.

Requests are free. We do not require you to create an account. We will never ask for your name to process a device opt-out.

#

The data we receive from Data Partners is organised around a device's mobile advertising ID, not around your name. To stop us using your device’s data, email us an opt-out request with that advertising ID.

Find your advertising ID

• Android: Settings › Google › All services › Ads, or Settings › Privacy › Ads. The ID is shown as “Your advertising ID”. Menu names vary by manufacturer and Android version.
• iPhone and iPad (iOS): iOS does not show the Identifier for Advertisers (IDFA) in Settings, and most apps can read it only if you allowed them to track you. If you have never allowed tracking, apps may have received no IDFA from your device. In that case, contact us and we will help you with your request.

What happens when you opt out

• We stop using and selling data linked to that advertising ID.
• We delete the device records we hold for that ID within 30 days, including location, network and device information and estimated home and work places.
• We stop showing the device to Agencies and exclude it from any future disclosure release.
• We keep a record of the opt-out for as long as we operate the Data Services, so the device’s data is not used again.

Limits you should know about

• Device-specific. An opt-out covers only the advertising ID you submit. If you use several devices, send each one.
• Resetting your ID. If you reset or delete your advertising ID, the device gets a new one that is not covered by your opt-out. Send a new opt-out for the new ID. Deleting the ID entirely also stops most apps from sharing it.
• Past releases. Before your opt-out, an Agency may already have received data about the device through an approved disclosure. We cannot recall data from an Agency. Where the law requires, we will tell the Agency about your request. To make a request about data an Agency holds, contact that Agency directly.
• Data Partners and apps. Our opt-out does not stop the apps on your device or our Data Partners from collecting data for their own purposes. Use the controls below as well.

Device controls that reduce data collection

• Location Services. Turn off location access for apps that do not need it. On iOS go to Settings › Privacy & Security › Location Services. On Android go to Settings › Location › App location permissions.
• Tracking and ads. On iOS, turn off “Allow Apps to Request to Track” (Settings › Privacy & Security › Tracking). On Android, delete your advertising ID (Settings › Privacy › Ads › Delete advertising ID).
• App permissions. Review which apps can see nearby Wi-Fi networks or precise location.

#

You can ask us to confirm whether we hold data about you and to send you a copy.

For a device, we will tell you:

• the categories of data linked to the advertising ID and the date range we hold
• whether the device has been associated with a terminal record
• whether any of its data has been released to an Agency, where the law allows us to say so and doing so would not prejudice a lawful investigation

Location history is precise and sensitive. An advertising ID alone does not prove you own a device. We therefore send precise location data only after the stronger verification described in section 6. We deliver it in a structured, machine-readable format.

For Platform users and contacts, we will send your account, contact, support and audit data that relates to you. Quant conversations are visible only to you in the Platform, and you can delete them there at any time.

#

Deletion. For a device, a deletion request does everything an opt-out does (section 2). We keep a record of the request so that the device’s data is not used again. For Platform users, we delete your account data under the periods in the Data Retention Schedule after your Agency's administrator removes you from the Platform, or sooner when you ask us. We may keep some records that we are legally required to keep, or that we need to establish or defend legal claims. Examples are:

• audit log entries showing that you made or approved a disclosure request
• invoices

The Data Retention Schedule sets out the periods.

Correction. You may ask us to correct inaccurate data. Device data reflects what Data Partners observed. If you believe a device or place has been wrongly associated with a terminal or with you, tell us why. We will review the record, correct or remove it where appropriate, and note the dispute. Platform users can update their name and notification settings in their account settings. An Agency administrator can change roles.

#

• Emails. Every non-essential email from the Platform contains an unsubscribe link. You can change email frequency in your notification settings. We will still send essential account, security and billing messages.
• Cookies. We use only strictly necessary cookies. See the Cookie & Similar Technologies Notice.
• Global Privacy Control. We honour GPC browser signals as an opt-out of sale and sharing for that browser. A browser signal cannot reach a mobile advertising ID, so email us to opt out a device.
• Quant. You can delete any Quant conversation at any time. It is deleted at once. See About Quant, the AI Assistant.

#

• Opt-out: no verification beyond a valid advertising ID. Anyone who submits an ID can stop its use. This protects people quickly and carries little risk.
• Deletion: a valid advertising ID and a working email address to receive confirmation.
• Access to device data: proof that you control the device, for example a screenshot of the device’s settings showing the ID.
• Platform users and contacts: a confirmation from the email address we hold.

We use verification information only to process your request. We then delete it, keeping a record of the request as the law requires.

#

Someone you authorise may submit a request for you. They must provide your signed written permission or a valid power of attorney. We may ask you to confirm the authorisation directly with us and to verify your identity for access and deletion requests. Parents and legal guardians may submit requests for a minor.

#

We publish yearly figures in our annual transparency report, described in Privacy Request Statistics.

#

We may decline all or part of a request. Reasons include:

• we cannot verify it
• it would reveal another person's data
• it is manifestly unfounded or excessive
• the law requires or allows us to keep the data

We will explain our reasons. You can appeal by replying to our decision, or by emailing [email protected] with the subject “Privacy request appeal”. Someone who was not involved in the first decision will review it. You can also complain to your data protection regulator. Regulators are listed in the regional notices.

#

• Agencies. Data an Agency received through an approved release is held by that Agency under its own law. Contact the Agency to exercise rights over it.
• Data Partners and apps. They collect and share data under their own privacy notices. Contact them, or use your device controls, to stop collection at the source. The current list of our Data Partners is available on request from [email protected].
• Starlink. We are not affiliated with Starlink. We cannot act on your Starlink account.