Subject Access Requests
You have the right to see the personal data we hold about you, to correct it, and in most cases to have it deleted. This page explains exactly how to ask and what happens next. You do not need a lawyer, a form or a particular form of words.
Last updated
How to make a request
Email dpo@auralink.ae with "Data Subject Request" in the subject line. To help us find your records, include:
- your name and the email address or phone number you used when contacting us;
- which right you are exercising — access, correction, erasure, restriction, objection or portability;
- roughly when the interaction happened, if you know.
You may also write to our registered office. Requests are free of charge.
Requests about a client system
If your data sits inside a platform we built and operate for another organisation — a telecom operator, a government body, an enterprise client — that organisation is the controller and we are only their processor. We cannot lawfully act on your request directly.
Send it to them and they will instruct us. If you are not sure who the controller is, write to us anyway: we will tell you where to go, and we will forward your request rather than let it die in an inbox.
Verifying who you are
We will ask you to confirm your identity before we release personal data. Usually a reply from the email address already on record is enough. Where the request is broad or the data is sensitive we may ask for more, and we will ask for the minimum that satisfies us — we do not want a copy of your passport on file if we can avoid it.
Timelines
We acknowledge receipt within 5 business days and respond substantively within one month of verifying your identity. Where a request is complex or you have made several, we may extend by up to two further months; if we do, we will tell you inside the first month and explain why.
When we may decline, in whole or in part
The rights are strong but not unlimited. We may withhold data where releasing it would disclose another person's personal data, breach legal privilege or a confidentiality obligation, expose commercially confidential security detail, or where we are legally required to keep the record.
If we decline any part of a request we will tell you which part, on what basis, and how to challenge it — including your right to complain to a supervisory authority.
Escalating
If you are unhappy with how we handled your request, reply to dpo@auralink.ae and ask for it to be escalated. You may also complain to your local data-protection supervisory authority, or in the UAE to the UAE Data Office. Nothing on this page limits that right.