Your privacy rights

If you are in the European Economic Area or the United Kingdom, the GDPR or the UK GDPR gives you rights over personal data WorkHeadshot holds about you. This page is how you use them. What we collect, why, and who receives it is in the privacy notice.

Email privacy@workheadshot.com from the address on your account, if you have one. Say whether you want a copy, a correction, or deletion, and include the email on the account if you can. We may ask for enough information to find the right account and to check that the request is yours.

We reply within one month. If a request is complex, the law lets us extend that by up to two further months, and we will tell you if we do.

You can ask us for any of the following.

• Access: whether we process personal data about you, and a copy of it.
• Correction: fix an email address or other account data that is wrong.
• Deletion: erase the data described below.
• Restriction: pause processing while a correction or an objection is unresolved.
• Portability: where processing is based on your contract and carried out by automated means, a copy of the account data you provided, in a common machine-readable form.
• Objection: object to processing based on legitimate interests, including security logs kept by the host.

On a deletion request we delete the account session, the email on it, sign-in records, the headshot balance, the saved headshot files, contact messages from that email, chat messages on that session, and the visit record tied to that session.

Dodo Payments may keep payment and invoice records for as long as tax and accounting law requires. We do not hold your card number, so we cannot delete it from our systems. Use the receipt if you want Dodo Payments to handle their copy.

If you object to processing based on legitimate interests, we will stop unless we have a compelling reason the law recognizes, or we need the data for a legal claim.

You can complain to a supervisory authority without asking us first. In the EEA, that is usually the authority in the country where you live or work. In Germany, that is the data protection authority of the federal state where you live. In the United Kingdom, that is the Information Commissioner's Office at ico.org.uk.

You can also write to privacy@workheadshot.com first if you want us to look at it.

We do not ask you to consent to advertising cookies, because we do not use them. The session cookie is part of the service, not an optional extra. You can still delete it in your browser. Details are in the cookie policy.

We do not use your data to make a solely automated decision that produces a legal effect, or a similar significant effect. A headshot is an edit you requested. It is not a score, a hiring decision, or a credit decision.