General Information:
The UK General Data Protection Regulation (GDPR) gives you the right to know what information is held about you, to access this information and to exercise other rights, including the rectification of inaccurate data.
Further information on what constitutes personal information and your rights can be found on the Information Commissioners Office (ICO) website.
The summary of your individual rights under the UK GDPR are:
to access your personal data held by us and to obtain certain information describing how we process it, including a copy of the personal data we process about you.
to rectify your personal data if it is inaccurate or incomplete.
to erase your personal data where one of the following ground applies:
it is no longer necessary for the purpose we collected it for.
you withdrew your consent for us to process the data and we do not have any other legal ground to process it.
you object to the processing of data and we do not have any other overriding legitimate grounds to process your data.
we processed your data unlawfully.
local legislation requires us to erase it to comply with a legal obligation;
to restrict the processing of your personal data, subject to certain exceptions, when:
you contest the accuracy of the personal data we process about you. We must restrict processing of the contested data until we can verify the accuracy of your personal data.
we are unlawfully processing your personal data but you would not like us to erase it.
we no longer need to process your personal data but you need the personal data for the establishment, exercise, or defence of legal claims.
you have objected to the processing of your personal data and we need a certain period to verify whether we have any other legitimate grounds to process your data.
to receive a copy of your personal data and (or) to transmit it to another company if we use automated means to process your personal data and we either process it with your consent or the data is necessary for us to perform a contract with you. Your data portability right does not apply to personal data we hold in paper files. It also does not apply to data inferred by or derived by us from the data provided by you such as data we generate by analysing your personal data.
to object to the processing of your personal data , subject to exceptions, when we process your personal data for:
direct marketing purposes, including profiling related to direct marketing.
our legitimate interests.
not to be subject to a decision evaluating personal aspects, based solely on automated processing, including profiling where such decision produces legal effects to you or similarly significantly affects you.
How to raise a Data Subject Request?
We have made this process quick and simple where you can download our Data Subject Request form by clicking here, select what Individual Right request(s) you want to request in the form and submit the completed form along with your ID.
What do we do when we receive a Data Subject Request from you?
We will use all reasonable measures to verify your identity and the identity of the individual that you are acting on behalf. Where we are unable to do so, we may contact you for further information prior to actioning any request, this is to protect your information and rights.
We always aim to provide the requested information at the earliest convenience, but at a maximum, 30 days from the date the request is received. However, where the retrieval or provision of information is particularly complex or is subject to a valid delay, the period may be extended by two further months. If this is the case, we will write to you within 30 days and keep you informed of the delay and provide the reasons.
Where the request is made by electronic means, we provide the information in a commonly used electronic format, unless an alternative format is requested.
We provide the information free of charge. Further copies requested by you may incur a charge to cover our administrative costs.