GDPR Data Subject Rights
Last updated: July 20, 2026 — Version 1.0
If you are in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) gives you rights over your personal data. This page explains those rights and how to exercise them when Zero Headache processes your data.
Two roles, two paths
If you are a Zero Headache client, we are the controller of your data and you can exercise your rights directly with us. If you are an end customer (someone who called, texted, or messaged one of our clients), the client is the controller of your data and we are their processor. In that case, contact the business you were trying to reach first; we will assist them in responding to your request.
1. Your rights
Under the GDPR, you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete your personal data in certain circumstances.
- Restriction: ask us to limit our processing of your data in certain circumstances.
- Data portability: receive your personal data in a structured, machine-readable format, and transmit it to another controller.
- Object: object to our processing of your personal data, including processing based on legitimate interests.
- Withdraw consent: where we rely on your consent, withdraw it at any time without affecting the lawfulness of processing before withdrawal.
- Complain to a supervisory authority: contact your local data protection authority. A list is at the European Data Protection Board.
2. Legal basis for processing
We process client data on the basis of the contract with the client (GDPR Article 6(1)(b)) and our legitimate interests in operating and improving the Service (Article 6(1)(f)). We process end-customer data on the documented instructions of the client (the controller) and, where applicable, on the basis of the end-customer's consent. Where we process special-category data, we rely on explicit consent (Article 9(2)(a)) or another applicable exception.
3. Automated decision-making
The Service uses automated processing to qualify leads and book appointments. This processing does not produce legal or similarly significant effects on you. If you believe an automated decision about you was wrong, contact the business you reached (if you are an end customer) or us directly (if you are a client) to request human review.
4. International transfers
Where your personal data is transferred outside the EEA or the UK, we rely on the Standard Contractual Clauses adopted by the European Commission under Implementing Decision 2021/914, together with a Transfer Impact Assessment where required. We do not transfer data to jurisdictions on the basis of adequacy decisions alone unless the jurisdiction is covered by one.
5. How to exercise your rights
Email us at legal@zeroheadache.co with your request. We respond within one month. If a request is complex or you submit several, we may extend the period by two months, in which case we will tell you within one month and explain why. We do not charge for requests unless they are manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to act.
6. EU AI Act
Under Article 50 of the EU Artificial Intelligence Act, we inform people at the start of any call, chat, or message handled by our AI that they are interacting with an AI system, not a human. The disclosure is delivered in the same channel and language as the interaction. The transparency obligations in Article 50 apply from August 2, 2026. See our AI Disclosure Statement for more.
7. Contact
Questions about this page or your GDPR rights can be sent to legal@zeroheadache.co.













