Data Processing
How to exercise your GDPR rights and submit data subject access requests.
Data Subject Access Requests (DSAR)
Under GDPR Article 15, you have the right to obtain a copy of personal data we hold about you. GridCutter retains the following types of data that may be linked to your identity:
- Server log files — IP address, browser type, date/time of access, pages visited. Retained for 90 days.
- No image or account data — We hold no photos, usernames, passwords, or emails.
To request a copy of your data, email gridcuttertool@gmail.com with the subject line "GDPR Data Access Request" and include your IP address (if known). We will respond within 30 days.
Right to Erasure
Under GDPR Article 17, you can request deletion of personal data we hold about you. Once deleted, we cannot recover or restore your server logs.
To request erasure: Email gridcuttertool@gmail.com with the subject "GDPR Erasure Request" and include your IP address. We will delete your server logs within 30 days.
Note: Anonymised data that cannot be linked back to you is not subject to erasure requests under GDPR.
Data Processing Agreements (DPA)
GridCutter uses a third-party hosting provider and Content Delivery Network (CDN) to serve the website. These sub-processors may handle server log data for security and operational purposes. We do not use any other third-party services that process personal data on our behalf.
Data Retention Schedule
- Server logs: 90 days, then automatically deleted
- Image data: Never stored (processed client-side only)
Lawful Basis for Processing
We process personal data under the following lawful bases (GDPR Article 6):
- Legitimate Interest (Article 6(1)(f)) — For server logs to prevent abuse, detect errors, and maintain security. We balance this against user privacy rights.
Right to Lodge a Complaint
If you believe GridCutter has violated your privacy rights under GDPR, you have the right to lodge a complaint with your local data protection authority (DPA). Examples include:
- EU: European Data Protection Board (list of DPAs by country)
- UK: Information Commissioner's Office (ICO)
- You can also contact us first: Email gridcuttertool@gmail.com to try to resolve the issue directly.
Contact Us
For any questions about data processing, GDPR, or to exercise your rights:
Data Protection Contact
Email: gridcuttertool@gmail.com
Subject line: "GDPR Request" (for access, erasure, or complaints)