Data Subject Access Requests

Last updated: 28 May 2026

This page explains how to exercise your rights over your personal data under the UK GDPR and the Data Protection Act 2018. The data controller is Goo Holdings Ltd (trading as Lineman) — our registered details are in the page footer. For *what* data we hold and *why*, see the Privacy Policy.

1. Your rights

You can ask us to:

  • Access — give you a copy of the personal data we hold about you, plus information about how we use it.
  • Erase ("right to be forgotten") — delete your account and personal data, subject to data we must keep by law (e.g. transaction records for tax).
  • Port — give you your data in a structured, machine-readable format (JSON), or send it to another provider where technically feasible.
  • Rectify — correct inaccurate or incomplete data.
  • Object / restrict — object to, or ask us to pause, certain processing.
  • Withdraw consent — where we rely on your consent (e.g. analytics cookies), withdraw it at any time without affecting prior processing.

2. The fastest route — self-service

If you have a Lineman account, you can exercise the most common rights yourself, immediately, from the dashboard:

  • Access & portability — *Account → Export my data* downloads a JSON file with your subscription, usage history, API-token metadata, and profile.
  • Erasure — *Account → Delete account* schedules deletion of your account and personal data. You can cancel during the grace period; after that it is irreversible.
  • Rectification — edit your profile, or change your email, in *Account settings*.
  • Cookie consent — withdraw or change analytics/marketing consent via the cookie banner ("Manage preferences").

3. Making a request by email

For anything self-service doesn't cover — or if you don't have an account but believe we hold data about you — email support@lineman.io with the subject line "DSAR". Tell us:

  1. Which right you want to exercise.
  2. The email address associated with your account (or the data you believe we hold).

There is no required form of words.

4. Verifying your identity

To protect your data, we verify that a request comes from you (or someone authorised to act for you) before we act on it — usually by confirming control of the account email. We may ask for additional information if we have reasonable doubts about identity. We only use what you give us for identity checks to verify the request.

5. How long it takes, and cost

We respond within one month of receiving a verifiable request. For complex or numerous requests we may extend this by up to two further months — if so, we will tell you within the first month and explain why.

Requests are free. We may charge a reasonable fee, or decline, only where a request is manifestly unfounded or excessive (for example, repetitive) — and we will explain our reasoning if so.

6. If you're unhappy

If you think we've handled your data or your request improperly, you can complain to the UK's supervisory authority, the Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to resolve it first — see our complaints process.