ANTY VIRTUAL Trust and Compliance

Your Rights

Access, correction, deletion, portability, objection: how to use them

These are the rights the GDPR and UK GDPR give people in Europe, and the Nigeria Data Protection Act gives people in Nigeria. We extend them to everyone whose data we hold, wherever they are, because the request is the same and so is the right answer.

Last updated 27 September 2026. Written to be read, not to be survived.

The rights

RightWhat it means hereWhat you get, and when
AccessTo know whether we hold data about you, what it is, why, who has seen it and how long we keep it.A copy of it, in plain words and as a file, within 30 days. Free.
RectificationTo have wrong or incomplete data corrected.Corrected within 30 days, and suppliers holding a copy told.
ErasureTo have your data deleted where we no longer need it, where you withdraw consent, or where you object and we have no overriding ground.Deleted from the live database within 30 days; from backups within seven more; suppliers told. Where the law makes us keep something (a tax or payment record), we say so and for how long.
PortabilityTo take the data you gave us in a form another service can read.A JSON or CSV export within 30 days.
ObjectionTo object to a use of your data that rests on our legitimate interests, and to any direct marketing.We stop unless we can show a compelling ground; for marketing, we stop, full stop. We do no marketing to a business’s customers on our own account.
RestrictionTo have processing paused while a dispute about accuracy or grounds is settled.Paused within 30 days.
Withdrawal of consentWhere consent is the basis (the identity check, a requested call-back), to withdraw it.Effective at once for the future.
Human reviewWhere an assistant decided something about you (it does not: an assistant books, answers and takes messages; a person at the business makes every decision that affects you), to have a person look.A person at the business, and at Anty Virtual on request.

How to exercise them

  1. Email privacy@antyvirtual.com with what you are asking for and the phone number or email the data is likely to be under. If you dealt with a business through us, say which business.
  2. We may ask one question to be sure it is you (a code to the phone number or email on the record), because sending someone’s data to the wrong person is worse than a day’s delay.
  3. We answer within 30 days. If a request is complex we may take up to 60, and we say so within the first 30 with the reason.
  4. Requests are free. Where a request is plainly repetitive we may say so and decline, with the reason.

A business using Anty Virtual can delete a customer’s record itself from its dashboard (Contacts), and asks us for an export or a correction it cannot make itself.

When we hold data for a business

For a customer of a business that uses Anty Virtual, the business is the controller and we are its processor. We will pass your request to the business within five working days and help it answer inside the 30, unless you ask us not to, in which case we answer for what we hold and tell you the business holds the rest. The business’s own privacy notice governs what it does beyond our platform.

Complaining

We would rather hear it first: privacy@antyvirtual.com. You may also complain to your data protection authority at any time: the Nigeria Data Protection Commission (ndpc.gov.ng) for people in Nigeria; the supervisory authority of your member state for people in the EU, or the Information Commissioner’s Office (ico.org.uk) in the UK; your state attorney general for people in the United States.