The policy explicitly lists several user data rights, including the right to delete data. It states that users can exercise these rights by contacting the company. No specific barriers such as excessive identity verification, extended timelines, fees, or specific account requirements are mentioned, leading to a 'Good' score.