Last updated: 8 December 2025

MUMly DATA SUBJECT ACCESS REQUEST (DSAR) PROCEDURE
Last Updated: 8 December 2025

Registered office: 124 City Road, London EC1V 2NX
Company No: 15322962

Scope: all users incl. parents, children (via parents), vendors, candidates, employers.

What is a DSAR: access/rectify/erase/restrict/object/portability; request copies of data.

How to Submit: support@mumly.co.uk. (if child-related). Include name, registered email, request scope; ID may be required.

Who May Submit: adults; parents/guardians for children (proof required); vendors; jobseekers; employers.

Timeframe: respond within 1 month; extend by 2 months for complex/multiple requests (notify within 30 days).

Verification: photo ID, proof of address, email confirmation; proof of parental responsibility for children.

What We Provide: account data, bookings, transactions, vendor messages, reviews, applications, employer feedback, support logs, technical data where relevant, marketing prefs, third-party sharing. Exclusions: third-party data, legal privilege, some safeguarding/fraud notes.

Refusals: manifestly unfounded/excessive/repetitive/abusive; risks to others; safeguarding exceptions. Provide reason and ICO info.

Rectification: 30 days.

Erasure: unless legal retention (HMRC, safeguarding, investigations, disputes). Backups 30–90d.

Restrict/Object: marketing, analytics, profiling, LI basis within 7–14d.

Portability: structured machine-readable exports (e.g., CV, profile, bookings).

Process: log, verify, gather, review/redact, securely deliver, close & log.

Fees: free unless excessive/repetitive (reasonable admin fee).

Complaints: ICO. Contact: support@mumly.co.uk.

Contact: support@mumly.co.uk | www.mumly.co.uk

© 2025 Mumly Group Ltd | Registered office: 124 City Road, London EC1V 2NX | support@mumly.co.uk