Subject Access Requests (SARs)
Individuals have the right to request access to their personal data under the UK General Data Protection Regulation (UK GDPR).
Subject Access Requests should be submitted in writing to:
To process a request, we require sufficient information to verify identity and locate the data. This may include full name, date of birth, previous names, proof of identity, and details of the information requested.
We will respond within one month of receiving a valid request and satisfactory proof of identity. Requests are processed free of charge unless they are manifestly unfounded or excessive.
In some circumstances, information may be lawfully withheld or redacted, or retained where there is a legal or regulatory obligation to do so.
If you have concerns about how your request is handled, you have the right to raise a complaint with the Information Commissioner’s Office (ICO).
