GDPR Information

    Your data protection rights explained

    Last Updated: December 27, 2025

    The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect in the European Union in May 2018. It gives you control over your personal data and strengthens your privacy rights.

    At WebPushBlaze, we are committed to GDPR compliance and protecting your data. This page explains your rights under GDPR and how you can exercise them. For detailed information about how we process your data, please see our Privacy Policy.

    Quick Summary: Your GDPR Rights

    Right to access your data
    Right to correct inaccurate data
    Right to delete your data
    Right to restrict processing
    Right to data portability
    Right to object to processing

    1. What is GDPR?

    The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the transfer of personal data outside these areas.

    Key principles of GDPR:

    • Lawfulness, fairness, and transparency: Processing must be lawful, fair, and transparent
    • Purpose limitation: Data collected for specific, explicit purposes
    • Data minimization: Only collect data that is necessary
    • Accuracy: Keep personal data accurate and up to date
    • Storage limitation: Keep data only as long as necessary
    • Integrity and confidentiality: Process data securely
    • Accountability: Organizations must demonstrate compliance

    2. Your GDPR Rights

    Under GDPR, you have the following rights regarding your personal data:

    1

    Right to Access

    You have the right to request a copy of the personal data we hold about you. This is known as a "Subject Access Request" (SAR).

    What you'll receive: A copy of your data, information about how it's used, who it's shared with, how long we keep it, and your rights.

    2

    Right to Rectification

    You have the right to have inaccurate or incomplete personal data corrected or completed.

    How to use it: Contact us with the correct information, and we'll update your data promptly. You can also update most information directly in your account settings.

    3

    Right to Erasure ("Right to be Forgotten")

    You have the right to request that we delete your personal data in certain circumstances.

    When applicable:

    • Data is no longer needed for its original purpose
    • You withdraw consent and there's no other legal basis
    • You object and there are no overriding legitimate grounds
    • Data was processed unlawfully
    • Required by legal obligation
    4

    Right to Restrict Processing

    You have the right to limit how we use your personal data while a dispute is resolved or data is verified.

    Effect: We can still store your data but not use it without your consent, except for legal claims or protection of others' rights.

    5

    Right to Data Portability

    You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another service provider.

    Format: We'll provide your data in JSON or CSV format that you can easily import to other services.

    6

    Right to Object

    You have the right to object to processing of your personal data based on legitimate interests, direct marketing, or scientific/historical research.

    Direct marketing: You have an absolute right to stop your data being used for direct marketing purposes.

    7

    Right to Withdraw Consent

    Where we process your data based on consent, you have the right to withdraw that consent at any time.

    Note: Withdrawal doesn't affect the lawfulness of processing before withdrawal.

    8

    Rights Related to Automated Decision Making

    You have the right not to be subject to decisions based solely on automated processing that significantly affects you.

    Our commitment: We do not currently use automated decision-making or profiling that produces legal or similarly significant effects.

    3. How to Exercise Your Rights

    You can exercise your GDPR rights by contacting us using the methods below:

    Submit a GDPR Request

    Email us with your request and we'll respond within 30 days:

    Please include in your request:

    • Your full name and email address registered with WebPushBlaze
    • The specific right you wish to exercise
    • Any relevant details or information we need to process your request
    • Proof of identity (to protect your data security)

    Response Timeline

    We will respond to your request within one month of receipt. In complex cases or if we receive multiple requests, we may extend this by up to two additional months, but we'll let you know if this is necessary.

    In most cases, there is no charge for exercising your GDPR rights. However, we may charge a reasonable fee or refuse to comply if your request is clearly unfounded, excessive, or repetitive.

    4. Legal Basis for Processing

    Under GDPR, we must have a lawful basis for processing your personal data. We process your data based on:

    • Consent: You have given clear consent for us to process your data for a specific purpose (e.g., sending push notifications)
    • Contract: Processing is necessary for a contract we have with you (e.g., providing the notification service)
    • Legal obligation: Processing is necessary to comply with the law
    • Legitimate interests: Processing is necessary for our legitimate interests (e.g., preventing fraud, improving our service) as long as your rights don't override these interests

    5. Data We Collect

    For a comprehensive list of the personal data we collect and how we use it, please refer to ourPrivacy Policy. In summary, we collect:

    • Account information (email, name, blog URL)
    • Subscriber data (browser type, device type, subscription tokens)
    • Usage data (notification metrics, engagement statistics)
    • Technical data (IP addresses, cookies, log files)

    6. Data Retention

    We only keep your personal data for as long as necessary to fulfill the purposes for which it was collected:

    • Active accounts: Data retained while your account is active
    • Deleted accounts: Most data deleted within 30 days after account deletion
    • Legal requirements: Some data may be retained longer for legal or regulatory compliance
    • Anonymized data: May be retained indefinitely for analytics

    7. International Data Transfers

    Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:

    • Standard Contractual Clauses (SCCs) approved by the European Commission
    • Adequacy decisions confirming adequate data protection in the destination country
    • Binding Corporate Rules (BCRs) for transfers within corporate groups

    8. Right to Lodge a Complaint

    If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you live, work, or where an alleged infringement occurred.

    EU Supervisory Authorities:

    You can find your local data protection authority at:European Data Protection Board - List of Supervisory Authorities

    Note: We encourage you to contact us first so we can try to resolve any concerns you may have before escalating to a supervisory authority.

    9. Children's Data Protection

    Our service is not intended for children under the age of 16. We do not knowingly collect or process personal data from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us immediately, and we will take steps to delete such information promptly.

    10. Updates to GDPR Information

    We may update this GDPR information page to reflect changes in regulations, our practices, or legal requirements. We will update the "Last Updated" date at the top of this page when we make changes. For significant updates, we may notify you via email or through a notice on our website.

    11. Contact Us

    For questions, concerns, or requests related to GDPR and your data rights, please contact us:

    WebPushBlaze Data Protection

    Email: [email protected]

    GDPR Requests: [email protected]

    General Support: [email protected]

    Website: https://webpushblaze.com

    12. Additional GDPR Resources

    To learn more about GDPR and your data protection rights, visit these official resources:

    Related Policies

    For more information about how we protect your data and handle your information: