EU and UK users have rights under GDPR and UK GDPR to access, correct, delete, restrict processing of, and port their personal data, as well as the right to object to processing and to withdraw consent at any time.
This analysis describes what Headspace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The provision operationalizes statutory privacy rights within Headspace's service terms, establishing procedural obligations for Headspace to comply with GDPR and UK GDPR requirements and defining the timeline and scope of Headspace's response obligations.
If you are in the EU or UK, you can request that Headspace provide a copy of all your personal data, delete your account and data, or stop using your data for marketing at any time — and Headspace must respond within one month.
How other platforms handle this
If you are located in the European Economic Area (EEA) or United Kingdom, the data controller for your personal information is Twitter International Unlimited Company. If you are located outside of the EEA, United Kingdom, and Switzerland, the data controller is X Corp. You have the right to access,...
If you are located in the European Economic Area, you have certain rights under the General Data Protection Regulation. These include the right to access personal information we hold about you, to rectify inaccurate data, to erase your data, to restrict processing, to object to processing, and to da...
Depending on your location, you may have certain rights regarding your personal data, including the right to access, correct, delete, or port your data, the right to restrict or object to processing, and where processing is based on consent, the right to withdraw consent at any time. California resi...
Monitoring
Headspace has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Individuals in the EU and UK have privacy rights under the GDPR and the UK equivalent. We will work to respond to your verified request within a month's time unless we request an extension. Right to object to processing - You may have the right to request that Headspace restrict the use of your personal data in certain circumstances. Right not to be subject to automated decision making - You have the right not to be subject to a decision based solely on automated processing.— Excerpt from Headspace's Headspace Privacy Policy
(1) REGULATORY FRAMEWORK: GDPR (Regulation (EU) 2016/679) Arts. 15–22 grant EU/EEA data subjects rights of access, rectification, erasure, restriction, portability, and objection. Art. 9 imposes heightened protections for special category data (health data) requiring an explicit legal basis. UK GDPR (retained GDPR as amended by the Data Protection Act 2018) applies equivalent rights to UK users. Cross-border transfers require GDPR Chapter V mechanisms (adequacy decisions, SCCs, BCRs). EU supervisory authorities and the UK ICO have enforcement authority. GDPR fines reach €20M or 4% of global annual turnover. (2)
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The provision operationalizes statutory privacy rights within Headspace's service terms, establishing procedural obligations for Headspace to comply with GDPR and UK GDPR requirements and defining the timeline and scope of Headspace's response obligations.
If you are in the EU or UK, you can request that Headspace provide a copy of all your personal data, delete your account and data, or stop using your data for marketing at any time — and Headspace must respond within one month.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Headspace.