Last updated · May 1, 2026
The practical guide to your rights under UK GDPR and EU GDPR — what you can do, and exactly how to do it at Nook.
Effective date: May 1, 2026
Last updated: May 1, 2026
This page explains your data rights under the UK GDPR and the EU GDPR, and how to exercise them with Nook. For the full legal basis and detail, see our Privacy Policy. This page is the practical version — what you can do, and how.
When Nook holds personal data about you, you have legal rights to:
These rights apply to all users in the EU, EEA, and UK. We extend the same protections to users in other jurisdictions.
We collect and process:
For full details, see Section 2 of our Privacy Policy.
Get a complete copy of the personal data we hold about you in machine-readable format.
Self-service:
By request: email privacy@thenook.rent with subject "Data Access Request". We respond within 30 days.
Most data: edit directly in Settings or your profile page. For data you can't edit yourself, email privacy@thenook.rent. We correct within 30 days.
Self-service: Settings > Account > Delete account. Account closes within 7 days; most personal data deleted within 90 days. Some records retained longer per legal obligations (tax/billing: 6 years; fraud prevention: as required; anonymized analytics: indefinite).
Pause certain types of processing while a dispute is resolved. Email privacy@thenook.rent. We respond within 14 days.
Same as Right to Access — the ZIP file is in JSON, easily importable to other services.
Toggle off in Settings, or email privacy@thenook.rent. Future processing stops; past processing remains lawful.
Request human review of AI-driven decisions that significantly affect you. Email privacy@thenook.rent. A human re-evaluates within 7 days.
You can complain to a supervisory authority:
You don't need to contact us first, but we encourage it. Email privacy@thenook.rent or dpo@thenook.rent.
Take action right now:
Get a ZIP of everything we have on you, in machine-readable JSON.
Edit information in Settings or request corrections by email.
Account deletion cannot generally be undone once completed. Some records may be retained per legal obligations.
Stop specific uses of your data — marketing, analytics, AI training.
Control how AI uses your data, voice clips, and auto-decisions.
| Request type | Our response time |
|---|---|
| Data access (download) | Within 30 days |
| Data correction | Within 30 days |
| Data deletion | Within 90 days |
| Restriction request | Within 14 days |
| Right to object | Within 14 days |
| Automated decision review | Within 7 days |
| Complex / large requests | Up to 90 days (we'll explain why) |
We may need to verify your identity before fulfilling certain requests, especially deletion. This protects you against impersonation.
Nook uses AI for cover letter generation, listing analysis, scam detection, and matching. You have specific protections:
| AI feature | What data is used | Where |
|---|---|---|
| Cover letter generation | Profile + listing text | External LLM (Claude/GPT, encrypted) |
| Voice transcription | Audio you record | External STT (auto-deleted within 30 days) |
| Listing policy extraction | Public listing text | Internal AI |
| Match scoring | Profile + listings | Internal AI |
| Scam detection | Listing text and metadata | Internal AI |
Settings > Voice & AI:
We are based in the UK. Some service providers process data in other countries (US, EU). When data leaves the UK/EEA, we ensure adequate protection through Standard Contractual Clauses approved by the UK ICO or European Commission, or other approved transfer mechanisms.
For details, see Section 6 of the Privacy Policy. If you object to international transfers, contact dpo@thenook.rent.
We do not knowingly collect data from anyone under 18. If you believe a minor has provided data, contact privacy@thenook.rent and we will investigate and delete.
Email: dpo@thenook.rent
Our DPO oversees compliance with applicable data protection requirements and handles privacy-related inquiries and complaints.
For non-DPO data inquiries:
We will update this page when our processes change or when legal requirements evolve. Significant changes will be communicated by email.