You begin by completing a short interactive form.

This information is used to generate a valid Subject Access Request and typically includes:

• Your identifying details
• The organisation you are contacting
• A description of the personal data you are requesting

Where required, organisations may later ask you directly for proof of identity. Subject Access does not bypass or override identity verification requirements.

Once your request is generated, you choose how it is handled:

This information is used to generate a valid Subject Access Request and typically includes:

• Submit it yourself
  You receive a completed Subject Access Request which you can review and send directly to the organisation.
• Have Subject Access submit it for you (optional)
  Subject Access prepares and sends the request on your behalf as a technical and administrative agent.

Submission by Subject Access may be offered as a paid service. Any applicable fees are clearly disclosed before submission.

After submission, the organisation is responsible for responding to your request within statutory time limits.

Subject Access does not control how organisations respond, what exemptions they apply, or what information they disclose. Responses are governed by law, not by Subject Access.

If an organisation fails to respond or responds inadequately, you may choose to follow up, escalate the matter to a data protection authority, or seek independent legal advice.