thekatos

Legal

Data protection rights

Last updated: August 1, 2026. This page explains how people in the EEA and UK can submit data protection requests concerning thekatos.

Data protection rights

Subject to the conditions in the applicable law, a request may concern the following rights.

  1. Access

    Ask whether personal data about you is processed and request a copy together with the information required by applicable law.

  2. Rectification

    Ask for inaccurate personal data to be corrected or incomplete information to be completed.

  3. Erasure

    Request deletion in the circumstances provided by law, subject to obligations or permitted grounds for continued retention.

  4. Restriction

    Ask for processing to be limited while a qualifying issue about accuracy, lawfulness, or need is reviewed.

  5. Portability

    Receive eligible data in a structured, commonly used, machine-readable format when the legal conditions are met.

  6. Objection

    Object to eligible processing based on legitimate interests and object at any time to direct-marketing processing.

  7. Withdraw consent

    Withdraw consent for future processing when consent is the legal basis, without affecting earlier lawful processing.

  8. Automated decisions

    Request the safeguards available for a qualifying solely automated decision that produces legal or similarly significant effects.

How to submit a request

Email privacy@thekatos.com from the address associated with the relevant account where possible. State the right you want to exercise and provide enough context to identify the account, campaign, or interaction involved. Do not send a password, full banking details, or an identity document unless a secure route is provided.

Identity and authority

Reasonable verification may be requested before data is disclosed or changed. If a representative submits the request, evidence of authority may also be required.

Response period

A request will be handled within the period required by applicable law. Under GDPR, that period is generally one month after receipt and may be extended where the law permits; the requester will be informed if an extension or lawful refusal applies.

Limits and retention

A request can be limited where information must be retained, another person’s rights would be affected, or another legal exception applies. The applicable reason will be explained where the law requires it.

The relevant basis depends on the specific purpose, data, relationship, and jurisdiction.

Contract and requested steps
Providing an account or campaign function requested by a user or taking steps requested before an agreement is entered.
Legal obligations
Meeting applicable tax, accounting, compliance, security, or lawful disclosure requirements.
Legitimate interests
Operating, securing, supporting, and improving the service where those interests are not overridden by individual rights and freedoms.
Consent
Processing that depends on a freely given, specific choice, including optional browser technologies where consent is required.

International processing and service providers

Personal data may be processed outside the country where it was collected when an authorized account user or service provider operates internationally. Where a transfer mechanism is required, the responsible organization may use an adequacy decision, approved contractual clauses, or another mechanism recognized by applicable law.

Providers may support hosting, authentication, communications, security, connected accounts, creator payouts, and customer support. Current provider information may be requested through the privacy address where disclosure is required and appropriate.

Questions and complaints

Send privacy questions to privacy@thekatos.com. You may also have the right to complain to the data protection authority in the country where you live, work, or believe an infringement occurred. See the Privacy Policy for broader information about collection, use, disclosure, retention, and security.