GDPR Compliance

General Data Protection Regulation

Last updated: January 1, 2026

Our Commitment to GDPR

HeyMeta, operated by Simon Wilby, is committed to protecting the privacy and rights of individuals in the European Union and European Economic Area. We comply fully with the General Data Protection Regulation (EU) 2016/679 (GDPR).

Data Controller

Simon Wilby Enterprises is the data controller for personal data processed through HeyMeta. For data protection inquiries, contact our Data Protection Officer at: dpo@heymeta.ai

Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access (Article 15)

You have the right to obtain confirmation as to whether your personal data is being processed and to access that data along with information about how it is being used.

Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete data completed.

Right to Erasure (Article 17)

Also known as the "right to be forgotten," you can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing (Article 18)

You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of your data.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests, direct marketing, and processing for research purposes.

Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal or similarly significant effects.

Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Consent: Where you have given clear consent for us to process your data for specific purposes
  • Contract: Where processing is necessary for the performance of a contract with you
  • Legitimate Interests: Where processing is necessary for our legitimate interests and does not override your rights
  • Legal Obligation: Where we need to comply with legal requirements

International Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or reliance on adequacy decisions.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on data type and purpose.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at: gdpr@heymeta.ai

We will respond to your request within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.

Related Platforms

This GDPR policy extends to related platforms in the Simon Wilby ecosystem including Wilby.AI, 1Voice.AI, HeyGrok.AI, UtopiaTV.AI, and SimonWilby.uk.