Home › Data Subject Access Request
Data Subject Access Request
Last updated: 13 September 2026. Under UK GDPR, you have the right to ask us what personal data we hold about you and receive a copy of it — this is called a Subject Access Request.
Account export: if available in your panel, Account › Privacy › Download my data provides an account-data export. It may not contain every record covered by a subject access request. You can contact us whether or not you have an account, and you do not have to use the panel.
When you'd use this page instead
- You don't have an account, or can no longer access one, but believe we hold data about you (for example, from a live chat conversation or an enquiry form)
- You want data in a different form than the self-service export, or have questions about what's included
- You're asking on behalf of someone else, with their authority to do so
How to make a request
You can make a request verbally or in writing, including by email to [email protected]. You do not need to mention GDPR or use a particular subject line or form. To help us locate the records, you may provide:
- Your full name and the email address associated with any account or enquiry
- Enough detail for us to find the right records — an approximate date, or which service you used, if you remember
- Information to help confirm your identity if we reasonably need it. Please do not send identity documents unless requested; we only ask for evidence proportionate to the circumstances
What happens next
- We acknowledge every request within a few working days
- We respond without undue delay and normally within one calendar month. If necessary, an extension of up to two further months may apply because of the complexity or number of requests; we explain this within the initial month. Any timing adjustment for reasonably required identity evidence or clarification is handled under the applicable legal rules.
- The response is free, unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline — a repeated request is not automatically excessive, and we explain any decision, including how to complain
What's included
We provide a copy of your personal information within the scope of your request, together with the supplementary information required by UK GDPR. This may include account records, service history, support messages and security logs. We carry out reasonable and proportionate searches. Information about others and any applicable exemptions are assessed case by case; internal opinions about you may also be personal information. We explain any lawful withholding as far as permitted and arrange an appropriate secure delivery method.
Not satisfied with our response?
Tell us — we'd rather put it right. If you still think we've got something wrong, you can complain to the Information Commissioner's Office at ico.org.uk, or 0303 123 1113.