Subject Access Request (SAR)
This request allows you to find out what information we hold about you. It cannot give you information about someone else unless you have a mandate from that other person. To make a SAR, we recommend you complete our online form or email us at firstname.lastname@example.org. However, you can make a request directly to any employee.
We will respond to your request within 1-month. Where the request is complex, we may have to extend the timeframe for another two months (where this occurs, we will notify you of this). We will not begin the SAR process until we have received suitable evidence that you are who you say you are (e.g. ID to confirm identity). Therefore, we advise that you supply this with your request.
Where requests are made for malicious intent (to harass the organisation or employee) or to cause purposeful disruption, we may decline the request. Where this occurs, we will confirm this to the requester in writing.
If your find we hold any wrong information about you, you have the right to request that the data is rectified. You should let us know, (1) clearly what you believe is inaccurate or incomplete, (2) how we should correct it, and (3) where available, provide evidence of the inaccuracies.
You also have the right to get your data deleted, where the information is no longer required for the original purpose, it was collected for or where you have withdrawn consent. However, the right to rectification, deletion or restriction is not absolute and will be carefully assessed for legitimacy.