You have rights when a person or organization collects and records your personal details for the purpose of a commercial transaction.