Exercise Your GDPR Rights

Use this form to exercise any GDPR data-subject right we owe you under articles 15, 16, 17, 20, 21 and 7(3). We respond within the 30-day statutory window of article 12(3).

Which right do you want to exercise?

Pick the most accurate option. If you're not sure, choose "Access" — that's the catch-all "show me what you have on me" right and we can discuss the rest from there.

  • Access (art. 15) — receive a copy of personal data we process about you.
  • Rectification (art. 16) — correct inaccurate or incomplete data.
  • Erasure (art. 17) — delete your data, subject to overriding legal retention obligations (e.g. 7-year fiscal retention on placed orders).
  • Portability (art. 20) — receive your data in a structured, machine-readable format and/or have it transmitted to another controller.
  • Objection (art. 21) — object to processing based on legitimate interest, including profiling.
  • Consent withdrawal (art. 7(3)) — withdraw consent for any consent-based processing (newsletter, analytics) for the future.

Identity verification

To prevent unauthorised disclosure, we may ask you to confirm your identity before we act on the request — typically by replying from the email address we already have on file or providing your order reference. We never ask for ID-document scans unless the request can't be tied to existing account or order data.

Submit your request

Or email us directly: info@togopeptide.com with subject "GDPR request".

What happens next

  1. We log your request and acknowledge it via email.
  2. If we need to verify your identity we ask once, briefly.
  3. We act on it (provide data, correct it, delete it, etc.) within 30 days — extendable once by 60 days for complex cases, with notification.
  4. If we can't fulfil it (e.g. fiscal-retention overrides erasure) we explain why in writing and tell you how to lodge a complaint with the Autoriteit Persoonsgegevens.