The Data Protection Act (DPA) establishes a framework of rights and duties which are designed to protect personal data. At the heart of the Act are the eight data protection principles. The main purpose of these principles is to protect the interests of the individuals whose personal data is being processed. When handling personal data, we follow the data protection principles.
For further information and guidance on the Act please visit the Information Commissioner's website.
How we handle information requests for personal data
The DPA gives you a number of rights in relation to the processing of your personal data including the right of access to a copy of the personal information we hold about you. This is known as a subject access request.
We will respond to subject access requests no later than 40 days following the receipt of all the information necessary to deal with the request.
How to make a request for your personal data
Your request should be made to us in writing. It would help us if you could tell us in what regard you believe we might hold personal data on you.
So that we are sure we are providing information to the right person, we will require proof of your identity before we can act on your request. This should include a photocopy of the identification pages of your current passport or of a current photo driving licence, and a current utilities bill or credit card or bank statement, which includes your name and current address.
These can be returned to you if required.If you do not have any of these forms of identification please contact us.