Exercise your data rights
Subject to the PDPL and, where they apply, the GDPR / UK GDPR and CCPA/CPRA, you can ask us to give you access to, correct, delete, port, or restrict the personal data we hold about you, object to a particular processing, or withdraw a consent you have given. Here is how.
How the process works
1. Submit your request
Use the form below, or email us directly. Tell us which right you're exercising and enough detail for us to locate your data.
2. We verify your identity
To stop someone exercising your rights on your behalf, we confirm who you are before we act. We may ask for limited additional information — only what's needed to match you to our records.
3. We respond within the SLA
We respond within one month under the UK and EU GDPR (extendable by up to two further months for complex requests, with notice) and within 30 days under the PDPL. Where more than one applies, we honor the shorter period.
Already a customer?
If you have a Permafrost account, much of your tenant data is self-serve. You can export identities, findings, and access-review data as CSV or PDF from inside the product — scoped to your own tenant — without filing a request. A formal request is still the route for rectification, erasure, or anything beyond your account data.
Go to reports & exportsSubmit a request
Prefer email? Write to privacy@permafrostepm.com.
You also have the right to lodge a complaint with your supervisory authority — the ICO in the United Kingdom, your local data protection authority in the EU, or the UAE Data Office. We ask that you raise the matter with us first so we have the chance to put it right.