You have the right to find out if an organisation is using or storing your personal data. This is called the right of access. You exercise this right by asking for a copy of the data, which is commonly known as making a ‘subject access request’.
How to access your data
You can make a subject access request to find out what data is held and how it is used. You may make a subject access request before exercising your other
You can make a subject access request verbally or in writing. If you make your request verbally, we recommend you follow it up in writing to provide a clear trail of correspondence. It will also provide clear evidence of your actions. Your request should be handled within a month by the organisation.
To exercise your right of access, follow these steps:
Step 1 Identify where to send your request. ✔
You can contact the company directly and ask them where to send your subject access request. If they don't respond to you, you may be able to find this information in their terms and conditions or under the complaints section of their website.
Think about what personal data you want to access and ensure you mention this when making your request.
Step 2 Make your request directly to the organisation.✔
State clearly what you want and address your subject access request to the organisation via email or through the post. Some organisations might insist you pay an administration fee for them to process your subject access request. Ensure you have paid this fee and provide proof of payment with your subject access request
You might not want all the personal data that the organisation holds about you butit may be beneficial to see all of it as it doesnt cost you any more. However the company may respond more quickly if you explain this and identify the specific data you want.
When making a subject access request, include the following information:
Your name and contact details.
Any information used by the organisation to identify or distinguish you from other people with the same name (account numbers etc). Any details or relevant dates that will help it identify what you want.
For example, you may want to ask for:
emails between ‘person A’ and ‘person B’ (say from 1 June 2018 to 1 Sept 2018)
Goodluck with your request!