Data protection

You have information rights over personal data we process about you.

Your information rights include the right to:

• be informed about how your personal data is being used, who it is/will be shared with, for what purpose and for how long it will be retained
• access a copy of the personal data we hold about you
• rectification of personal data we hold about you if the information is inaccurate
• erasure of personal data that we hold about you
• restrict how we use your personal data, such as the range of purposes it may be used for
• on request, be provided with your personal data in a structured, commonly used and machine-readable format that you can transfer to another service provider
• object to how we are using your personal data
• not be subject to a decision based solely on automated processing, including profiling, which significantly affects you

These rights are not available in every case. For example, the right to receive a copy of your personal information could be restricted if the effect of complying with the request would be to prejudice the prevention or detection of crime.

Similarly, the right of erasure is not always available, and depends on the reasons why we hold your personal data.

You can ask us to provide you with the data we hold about you.

Submit a Subject Access Request 

To request your data, you will need to provide:

• your name, address and contact details
• a description of the data you are requesting
• confirmation of your identity

Once we receive your request, we will:

• acknowledge your request within three working days
• review the request to make sure we can release the data
• provide you with your data

Some information is exempt from data requests. This includes information that:

• refers to other people who have not consented to disclosure
• could cause damage or distress if we released it
• is related to crime prevention or legal proceedings, and could cause prejudice

If the information you requested is exempt, we will be unable to release it. However, we will still contact you to confirm the type of data we hold and why we hold it.

Whilst we try to resolve any concerns with you directly, ultimately this will not always be possible.

If you do not agree with how we have responded to your request, you have the right to complain to the Information Commissioner’s Office (ICO).

If you have any concerns about the way that your personal data has been used or if you wish to make us aware of a potential data breach, you need to contact our Information Governance team.