Last updated 21 August 2026

Your rights over your data

The UK GDPR gives you eight rights. Most privacy pages list them in the legislation’s own words, which is accurate and completely useless. Here they are in English, with what each one means when the data in question is an email address on a cookbook mailing list.

How to use any of them: email hello@authenticish.com and say which one you want. You do not need to quote a regulation, explain yourself, or use a particular form of words. We reply within a month and usually within a few days.

  1. Be told what we hold. Everything we do with data is on the privacy page. No hidden processing, no data sold to anybody.
  2. Get a copy of it. Ask and we send you everything we hold about you. For nearly everyone that is one line: an email address and the date you gave it.
  3. Correct it. If the address is wrong, tell us and we fix it. You can also just unsubscribe and sign up again.
  4. Have it deleted. Ask and it goes, within 30 days. Unsubscribing does the same thing, and you do not have to give a reason for either.
  5. Restrict what we do with it. Ask us to hold it but stop using it, for example while you are disputing something.
  6. Take it elsewhere. Ask and we send your data in a machine-readable file you can hand to somebody else.
  7. Object. Tell us to stop. For marketing email there is no balancing test and no argument: we stop.
  8. Not be profiled by a machine. Not applicable here. We make no automated decisions about anybody and run no profiling of any kind.

What we hold, realistically

If you have ever given us an email address, we hold that address and the date you gave it. That is the whole record. We do not hold your name unless you told us, we do not buy data about you from anybody, and we have never sold or rented a list and will not.

If you have only read the site, we hold nothing that identifies you. There are no cookies and no analytics. The server keeps ordinary request logs, which contain an IP address, and we do not look at them unless something is broken.

If you are not in the UK

The EU GDPR gives you the same eight rights and the same route to use them. Readers elsewhere are welcome to ask for exactly the same things and we will not check where you live before agreeing.

The full detail is on the privacy page, and you can complain to the ICO at any time without asking us first.