How to exercise your rights as a data subject under the Data Protection Act 2018 (UK GDPR).
Under the Data Protection Act 2018 (UK GDPR), you have rights as a data subject, including:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- And rights in relation to automated decision making and profiling.
If you want to exercise any of these rights, please let us know by submitting the form on this page
writing to: Data Protection Act 2018 (UK GDPR), Turn2us, Hythe House, 200 Shepherd’s Bush Road, London W6 7NL.
You can let us know by other methods, but we recommend email or writing to us via the post.
Irrespective of the contact method, the information we require from you to perform most requests, including a subject access request, is:
- A description of the information you are seeking and or the action you require, along with any relevant information you think will help us identify the information you require or request you have
- Your full name, address, contact telephone number and or email address
- Proof of (a) identity and (b) of your address in the form of scanned images or photocopies of one of each of the following: (a) Passport, photo driving license, national identity card, birth certificate; (b) utility bill (max 3 months old), bank or credit card statement (max 3 months old), current TV license, local authority tax bill (max 1 year old).
- If we are not satisfied you are who you claim to be, we reserve the right to refuse to grant your request.
Please note: that if the information you request reveals details directly or indirectly about another person, we will have to seek the consent of that person before we can let you see that information. In certain circumstances, where disclosure would adversely affect the rights and freedoms of others, we may not be able to disclose the information to you, in which case you will be informed promptly and given full reasons for that decision.
While in most cases we will be happy to provide you with copies of the information you request, we nevertheless reserve the right, in accordance with Article 12 of the Data Protection Act 2018 (UK GDPR), to charge a fee or refuse the request if it is considered to be “manifestly unfounded or excessive”. However we will make every effort to provide you with a satisfactory form of access or summary of information if suitable.
Please let us know how you would like to exercise your rights under UK GDPR