You have the right to request a copy of the information we hold about you. This is known as making a subject access request.

You have this right under the UK Data Protection Act 2018. As well as asking for a copy of your information, you can:

• ask us to correct or erase the data
• tell us to limit how we use the data
• ask us to transfer the data to another organisation
• object to our use of the data

The Information Commissioner’s Office provides a guide to individual rights.

Download and complete the subject access request form [RTF, 1.5MB] and send it back to us. You can also request a form at our customer service centre.

You can also use the form to request data on someone else’s behalf, if you have authorisation from them to do so.

Next steps

We might need to check your identity before we can process your request. This is to ensure we only release or take action on your data and not on anyone else’s.

We will tell you if we need:

• proof of identity, such as a passport or driving licence
• proof of address, such as a utility bill or bank statement
• evidence of authorisation, if you are making this request on someone else’s behalf

You can provide these as scanned copies, digital documents or screenshots.

If necessary, we will also ask you to provide more detail so we can locate the information you asked for.

We will send you a copy of the information we hold about you within one month. If you asked for something else, we will process your request within this time.

In some circumstances, such as if your request is complex, we can take up to two further months to respond. If we need to do this, we will contact you in the first month following your request to explain why.