Subject Access Requests (SAR)

Anyone can make a Subject Access Request (SAR) for the information that we hold about them. If you submit a SAR you are entitled to be:

  • told whether any of your personal data is being processed
  • given a description of the personal data, the reasons it is being processed, and whether it will be given to any other organisations or people
  • given a copy of the personal data
  • given details of the source of the data
  • informed about the reasoning behind any automated decisions taken about you

All SARs are handled by our compliance team. You can submit a SAR by contacting us on:

When submitting a request for a copy of the data we hold, you will need to confirm your identity prior to any data being supplied, to ensure you are entitled to receive the information requested. Identity can be confirmed by providing a copy of a recent utility bill (dated within the previous 6 months), a valid Passport or Driving Licence.

Upon receipt, our compliance team will acknowledge the request as soon as possible and will request more information if necessary.

We endeavour to respond as quickly as possible to all requests and at the latest within one calendar month of receipt.

The period for responding may be extended by a further two months where requests are complex or numerous. If this is the case, we will inform you within one month of receipt of the request and provide an explanation as to why the extension is necessary.

Where requests are manifestly unfounded or excessive, in particular because they are repetitive we can:

  • charge a reasonable fee taking in to account the administrative costs of providing the information, or
  • refuse to respond

If we decide to refuse to respond to a request, an explanation will be given to you without undue delay, informing you of your right to complain to the supervisory authority and to a judicial remedy.

When responding to your SAR our response will include:

  • Details of the data held on the individual
  • The source of the data
  • General description of the data held, the reasons it is being processed, and whether it will be given to any other people or organisations

Additionally, if requested in the SAR:

  • information about the reasoning behind any automated decisions taken about you

If we do not hold your details, we will add them to our suppression file, see Remove My Details, to ensure that we don't make use of them now or in the future. If the request also involves any of our suppliers, we will inform them and request confirmation of the "stop" or deletion request to both ourselves and to the individual directly.