Your data rights

• Access. Ask what personal data we hold about you, why, who we share it with, and get a copy.
• Rectification. Have inaccurate data corrected and incomplete data completed.
• Erasure. Ask us to delete data where we no longer need it, where you withdraw consent that was the only basis, or where you successfully object.
• Restriction. Ask us to pause processing while a dispute about accuracy or lawfulness is resolved.
• Objection. Object to processing based on our legitimate interests. We stop unless we can show compelling grounds that override your rights. You can always object to direct marketing, and we will stop.
• Portability. Where processing is automated and based on consent or contract, receive your data in a structured, commonly used, machine-readable format, or ask us to send it to another provider where technically feasible. Account holders can request an export of profile configuration.
• Withdraw consent. Where we rely on consent, withdraw it at any time. Withdrawal is as easy as giving it — cookie choices change in one click from the Cookie settings control in the footer.
• No automated decisions. We do not make decisions about you by automated means alone that produce legal effects, and we do not profile you for advertising.
• Complain. Lodge a complaint with a supervisory authority — see section 7.

Email contact@prodiasystems.com or write to Prodia Systems Limited, 27 Pembroke Street Upper, Dublin 2, D02 X361, Ireland.

You do not need to use a form or any legal wording. It helps us if you say:

• which right you want to use, or simply what you want to happen;
• whether the request is about you or about a communicator you are guardian for;
• the email address associated with any EyeSay account involved;
• anything that narrows the search, if you only want part of your data.

Requests are free of charge.

We respond without undue delay and within one month of receiving your request. For a complex or high-volume request we may extend by up to two further months; if we do, we will tell you within the first month and explain why. If we cannot act on your request, we will tell you why and how to challenge that.

A child has these rights in their own name. In practice a parent or guardian usually makes the request, and we will take the child's own views into account so far as we reasonably can. Where a professional or organisation asks on a child's behalf, we may need to confirm the guardian's authority first.

Please note that the communicator's message history is not held by us — it lives on the device — so we cannot produce or delete it for you. It is removed by clearing the app's data on that device. The child-facing explanation of all this is in the child privacy notice.

Some rights are not absolute. We may need to keep certain records to comply with a legal obligation, to establish or defend a legal claim, or to preserve the security and integrity of audit records. Erasing data that another account holder also relies on — for example configuration jointly used by a care team — may require us to consider their position too. Where we limit a right, we will tell you which exemption applies and why.

Please come back to us first at contact@prodiasystems.com. You also have the right to complain to the Irish Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland (dataprotection.ie), or to the supervisory authority where you live or work in the EU/EEA. You may also seek a judicial remedy.

The full description of what we process and why is in the privacy notice.