Under data protection laws (such as the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018), you have several rights regarding your personal data. GuruNow is committed to respecting these rights. You can exercise these rights by contacting us or, in some cases, through the platform itself. Your key rights include:
 

• Right to Access: You have the right to request a copy of the personal data we hold about you, and to check that we are lawfully processing it. This is sometimes called a “data subject access request.” For example, you can ask us to provide a copy of your profile information and any skills development data associated with your account. This could include, if you wish, copies of your conversation transcripts with the AI avatars, your completed program history, or a summary of your achievements (a sort of skills development "passport" of what you have accomplished on GuruNow). We can provide this in a common electronic format. GuruNow also strives to give you direct access within the platform to much of your data (for instance, you may be able to review your own skills development history, scores, and transcript excerpts as part of your account).
   

• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. You can update some of your information via your profile settings (for example, you might be able to change your display name or correct an email address typo). For any data you cannot update yourself, you can request that we correct it. If your employer manages your information, you may also contact your employer to have them send us updated details (for instance, if your job title changed, your employer can inform us so we update the skills development assignments accordingly).
   

• Right to Erasure: This is also known as the “right to be forgotten.” You can ask us to delete or remove your personal data in certain circumstances. For example, if you have finished using GuruNow and want all your personal data removed from our systems, or if you object to us processing certain data (see the right to object below) and we have no overriding legitimate grounds to continue. Do note that this right is not absolute – we may not be able to delete data that we are required to keep by law or that is necessary for defending legal claims. Also, if you’re using GuruNow via an employer, we may need to coordinate with them regarding deletion (since they might need records of your skills development). If you request erasure of key data (like your user profile or skills development records) while your employer is still using GuruNow for you, this could affect your ability to continue with the skills development service. We will inform you if that’s the case and likely refer you to your employer. In any event, we will do our best to comply with a valid erasure request and will let you know what we have done or if we need to retain anything.
   

• Right to Restrict Processing: You have the right to ask us to suspend or limit the processing of your personal data in certain scenarios. This means we can still store it, but we shouldn’t use it or share it further until the restriction is lifted. You might request this if, for example, you believe your data is inaccurate and you want to halt processing until we verify and correct it. Or if you have objected to our use of your data (see below) and we are considering whether our interests override yours. Another example is if we no longer need the data but you want us to keep it for you in connection with a legal claim. When processing is restricted, we will not use the data except for storage and to inform you or for certain legal reasons. We’ll also inform you before lifting any restriction.
   

• Right to Data Portability: You have the right to obtain personal data you provided to us, in a structured, commonly used, machine-readable format, and to have it transferred to another data controller where technically feasible. This right only applies to information that you provided to us (not data we generated) and which we process by automated means under consent or contract. In the GuruNow context, data portability might cover things like data you input during registration or assessments, and perhaps the core results of your skills development (since providing the skills development is a contractual service to you or your employer). If you wanted to, for instance, download your skills development history and import it into another learning platform, we would try to provide the data in a useful format (like a CSV file with your programs and scores). Or you could simply keep it for your own records. We would send the data to you, or directly to another controller if you request and if it’s feasible (direct transfers are tricky, but we’ll accommodate if we can and it’s secure to do so).
   

• Right to Object: You may object to certain types of processing of your personal data when we are doing it based on legitimate interests or performing a task in the public interest (we don’t do the latter, so it’s mostly legitimate interests for GuruNow). You also have an absolute right to object to your data being used for direct marketing. For example, if we send you marketing emails based on our legitimate interest in promoting our services, you can object (which in practice is the same as unsubscribing) and we will stop. If you object to other processing (say, you object to us using your transcripts to improve the AI, which we consider a legitimate interest), we will evaluate your objection. We will stop or limit the processing unless we have compelling legitimate grounds that override your rights or if we need to keep processing for legal claims. Generally, we will err on the side of respecting objections – if it’s not something critical, we’ll stop processing that data in the way you’re uncomfortable with. Bear in mind, if you object to something essential (like us processing your data to provide the service), we might have to treat it as a request to delete your data or deactivate your account, because we can’t realistically provide the service without processing that data. We’ll discuss options with you if that situation arises.
   

• Right not to be subject to automated decisions producing legal effects:
  Data protection law safeguards individuals against being subject to decisions made solely by algorithms or machines that have significant effects on them, without human intervention. As noted earlier, GuruNow does not make any decisions of that nature about you – our AI might give you feedback or scores, but those are for your benefit and for skills development purposes, not to determine something like your employment status or credit worthiness. There is always a human context for how your skills development results are used (your employer, for example, would not typically make an employment decision based solely on an AI-given score without any human review or context). Therefore, this right is more about informing you that you won’t be subject to such decision-making by us. If you feel that any outcome of using GuruNow has affected you in a serious way and it was based purely on an automated process, you have the right to request human review of that decision. We will certainly listen to any such concerns and ensure a person examines the situation.
   

• Right to Withdraw Consent: In the limited cases where we are relying on your consent to process your data, you have the right to withdraw that consent at any time. For example, if you gave consent to receive our newsletter, you can unsubscribe (withdraw consent) and we will stop that processing. Withdrawing consent will not affect the lawfulness of any processing we carried out before you withdrew, and it won’t affect processing under other legal bases (so if you withdraw consent for marketing, we might still process your data under contract to provide the core service). If you withdraw consent for something that is necessary for us to provide the service (though we usually don’t use consent for such cases), we’ll let you know if that means we cannot continue the service in the same way.
   

These rights can be subject to certain exemptions or conditions under the law. For instance, if fulfilling your request would adversely affect the rights and freedoms of others, we may not be able to fully comply (like if your data is intertwined with other users’ data in a way that releasing it would reveal their personal data). However, we will always try to accommodate your request to the fullest extent possible.