SURPRISEFLIXSign In

Your Rights

Data Rights Request

Last updated: 11 September 2026 (v1)

Use this form to request access to, correction of, or erasure of your personal data, to withdraw a consent you previously gave us, or to raise a privacy grievance. See our Privacy Notice for the full picture of what we collect and why.

You're not signed in. We'll still accept this request, but since we can't verify your identity automatically, we'll follow up at the email you provide to confirm it's really you before acting on it.

We'll use this to respond to your request.

What happens after you submit

  • If you're signed in when you submit, we can confirm the request came from your account automatically.
  • If you're not signed in, we record the request but treat it as unverified — we will not disclose, change, or delete any personal data against it until we've manually confirmed it's really you (for example, by corresponding with you at the email you provided). This is a deliberate, documented limitation: we'd rather ask you to verify than build an easily-spoofed automatic verification step.
  • Erasure and account deletion are currently a manual process on our side — Surpriseflix doesn't yet have a self-service “delete my account” button. Your request is still valid and will be acted on by a person, just not instantly.
  • Some data (e.g. payment records) may need to be retained even after an erasure request, where we're legally required to keep it — see the retention table in our Privacy Notice.