Data Protection & Information Requests

A Subject Access Request (SAR) is your right under UK GDPR to request access to your personal data that we hold. This allows you to understand what information we have about you, how we’re using it, and who we’re sharing it with.

We aim to respond to all Freedom of Information requests within 20 working days from the date we receive your request, as required by the Freedom of Information Act 2000. In complex cases, we may need to extend this timeframe and will notify you accordingly.

If you suspect a data breach, please report it immediately using our Data Breach Report form above. Include as much detail as possible about the incident, including what data may have been affected and when you discovered it. Under UK GDPR, we must report certain breaches to the ICO within 72 hours.

Under UK GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and to object to processing of your personal data. You also have the right to withdraw consent and to lodge a complaint with the Information Commissioner’s Office (ICO).

Subject Access Requests are typically processed within one calendar month of receipt, as required by UK GDPR. Freedom of Information requests are handled within 20 working days. We will contact you if we need additional information or if there are any delays.

Subject Access Requests are free of charge under UK GDPR. FOI requests are also generally free, though we may charge for photocopying or postage costs. We may charge a reasonable fee for manifestly unfounded or excessive requests. We will inform you of any fees before processing your request.

Yes, if you’re unhappy with how we’ve handled your personal data or responded to your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). Visit ico.org.uk or call 0303 123 1113 for more information.