An individual’s rights under the GDPR and UK GDPR only apply if that individual is resident in the UK or EU.
If the company or organisation that you are dealing with is a Data Controller established in the UK or EU and they are processing personal data, they will have to comply with the GDPR and as such, they may be open to approach about any concerns you have.
Strictly speaking, the Data Subject (you) would need to be residing in the UK or EU to benefit from the rights over personal data use that the GDPR gives to individuals. However, you could try writing to the organisation about your concerns and, if reputable, they may well address the issue and rectify it. It would make good business sense for them to keep their customers happy.
If agreeable, the organisation could apply similar rights that a UK or EU resident has under the GDPR to your data. These rights could include:
1. **Right to be Informed**: You have the right to be informed about how your personal data is being processed, including what data is being collected and for what purposes.
2. **Right of Access**: You have the right to access your personal data that is being processed by a company subject to GDPR.
3. **Right to Rectification**: If your personal data held by a company is inaccurate or incomplete, you have the right to request that it be rectified.
4. **Right to Erasure (Right to be Forgotten)**: In certain circumstances, you have the right to request that a company delete your personal data.
5. **Right to Restrict Processing**: You may have the right to restrict or limit the processing of your personal data by a company.
6. **Right to Data Portability**: In some cases, you may have the right to receive a copy of your personal data in a commonly used, machine-readable format and transmit it to another controller.
7. **Right to Object**: You have the right to object to the processing of your personal data under certain circumstances, such as for direct marketing purposes.
8. **Rights in Relation to Automated Decision Making and Profiling**: You have rights related to automated decision making, including the right to request human intervention in decisions based solely on automated processing.
