Legal
Your data rights
Last updated 27 August 2026
The rights data protection law gives you over information about you, what each one means in practice, and how to use them with us.
Which law applies
Coherence is operated by Booth.com Ltd, established in Gibraltar and subject to Gibraltar’s data protection regime, supervised by the Gibraltar Regulatory Authority. Where we deal with people in the United Kingdom or the European Economic Area, the UK GDPR or EU GDPR may apply alongside it. The rights below are substantially the same under all three.
In practice the only personal data we hold is email correspondence, so most of these rights will concern an email exchange you have had with us.
What you can ask for
To see what we hold
Ask for a copy of your personal data and an explanation of what we do with it. There is no charge, and we will not ask why you want it.
To have it corrected
If something we hold about you is wrong or incomplete, tell us and we will fix it.
To have it erased
Ask us to delete your data and we will, unless a law requires us to keep it. If that applies we will tell you which obligation and for how long.
To restrict what we do with it
Ask us to hold data but stop using it — useful while a dispute about its accuracy or our grounds for holding it is being resolved.
To object
Where we rely on legitimate interests you can object, and we must stop unless we can show compelling grounds that override yours. For direct marketing an objection is absolute and we stop, full stop.
To take it with you
Where we process data by consent or under a contract, and by automated means, you can ask for it in a structured, commonly used, machine-readable format, or ask us to send it to someone else.
To withdraw consent
Where we asked for consent you can take it back at any time, and it must be as easy as giving it was. On this site that means reopening your cookie choices. Withdrawing does not make what came before unlawful; it stops it continuing.
Not to be subject to automated decisions
We do not make decisions about you by automated means and we do not profile you. If that ever changes, this page changes first.
How to exercise them
Email team@coherence.com and say what you want. There is no form and no particular wording required.
We will respond within one month. If a request is genuinely complex we may extend that by a further two months, and we will tell you inside the first month if we need to. We may ask you to confirm your identity, but only where we honestly cannot tell who is asking.
If we get it wrong
Tell us first, at team@coherence.com. If we do not put it right you can complain to the Gibraltar Regulatory Authority, or to the supervisory authority where you live or work if that is elsewhere. Complaining to a regulator costs nothing and does not stop you taking the matter further.
Breaches
If a breach happens that is likely to risk your rights and freedoms, we will notify the supervisory authority within 72 hours of becoming aware of it, and tell you directly where the risk to you is high.