Six rights, no forms
Your rights, per GDPR
Most sites bury these behind “contact the DPO”. Here’s the whole set and the button that exercises each one.
Access
Art. 15See exactly what we hold. Owners get it on the dashboard; guests see their record on any list page they've joined.
Rectification
Art. 16Fix a typo in your name or a wrong price. Owners edit their lists freely; guests correct their details on the list page.
Erasure
Art. 17The “right to be forgotten.” Delete a list and it takes its data with it; owners can “Erase my account” from the dashboard, and a guest’s data is wiped the moment they use “Erase my data”.
Portability
Art. 20Take your data with you. From the dashboard, download everything wishli holds about you — every list and gift, plus who claimed what (guests as codes, not names) — as a clean JSON file you can drop into anything.
Restriction
Art. 18Temporarily stop processing. Hiding a list (the eye toggle) pauses it from view without deleting it.
Objection
Art. 21Push back on a legitimate-interest basis. For us that mostly means the cookie choice — decline and only the essentials run.
Need something the buttons can’t do?
Email [email protected] and a person (not an autoresponder) will answer within 30 days. You can also go straight to the ICO. No retaliation, no forms to print.