Legal pages 

Data Subject Access Requests (DSAR)

Under the UK General Data Protection Regulation (UK GDPR), you have the right to request access to the personal data that we hold about you. This is known as a Data Subject Access Request (DSAR). By submitting a DSAR, you can learn what personal information we have, how it is used, and who it has been shared with. To make a request, please complete the form below and provide the necessary identification documents to verify your identity. We aim to respond to all requests within one month of receipt, although this may be extended for complex or multiple requests. For more information on your rights and how we handle your data, please refer to our Privacy Notice and terms and conditions below.

Terms and conditions of Data Subject Access Requests

1. Introduction
These terms and conditions govern the submission and processing of Data Subject Access Requests ("DSAR") in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018 ("DPA 2018"). By submitting a DSAR, you ("the Data Subject") acknowledge and agree to the terms outlined below.

2. Data Subject Rights
As a data subject, you have the right to access the personal data that we hold about you, to understand how we use that data, and to whom it has been disclosed. You also have the right to request the rectification or erasure of your data, restrict processing, object to processing, or request data portability, as applicable under the UK GDPR.

3. Scope of the DSAR
A DSAR allows you to request the following:
- Confirmation as to whether or not your personal data is being processed.
- Access to your personal data.
- Information on the purposes of processing, categories of personal data concerned, recipients to whom personal data has been or will be disclosed, the period for which personal data will be stored, and the existence of automated decision-making, including profiling.

4. Information Required from You
To process your request, we may need to verify your identity and obtain additional information to locate the personal data you are requesting. The following information may be required:
- Full name, contact details, and any other information that may assist in identifying your data.
- Proof of identity (e.g., passport, driver's license).
- Proof of address (if necessary).
- Authorisation documents (if applicable).

*5. Timeframe for Response
We will respond to your DSAR within one month from the date of receipt of your request, provided that we have received all necessary information to process the request. In cases of complex or multiple requests, we may extend this period by up to two further months. You will be informed of any extension and the reasons for the delay.

6. Fees
We do not charge a fee for processing a DSAR unless the request is manifestly unfounded or excessive, particularly if it is repetitive. If a fee is required, it will be reasonable and based on the administrative costs of providing the information. You will be informed of any fees in advance.

7. Grounds for Refusal
We may refuse to comply with your DSAR in whole or in part if:
- We are unable to verify your identity.
- The request is manifestly unfounded, excessive, or repetitive.
- Compliance would adversely affect the rights and freedoms of others.
- Another legal exemption under the UK GDPR or DPA 2018 applies.

If we refuse your request, we will inform you of the reasons for refusal and your right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Data Use and Privacy
The personal data provided in this form will only be used to verify your identity, process your DSAR, and communicate with you regarding your request. All information will be processed in accordance with our Privacy Notice and the UK GDPR.

9. Third-Party Requests
If you are making a DSAR on behalf of another individual, you must provide evidence of your legal authority to act on their behalf, such as a power of attorney or other authorisation document.

10. Contact Information
For any questions or concerns about this DSAR form or your personal data, please contact our Data Protection Officer using the contact form on this website. 

11. Changes to These Terms and Conditions
We reserve the right to modify these terms and conditions at any time. Any changes will be posted on our website, and you are advised to review these terms periodically for any updates.

12. Governing Law
These terms and conditions are governed by and construed in accordance with the laws of Scotland. Any disputes arising out of or in connection with these terms shall be subject to the exclusive jurisdiction of the courts of Scotland.

13. Response Times

We agree to response within a One-Month Period. 

• If we require further information from you to clarify their request, the one-month period will begin once we have received the necessary information to process the request.

Extension for Complex or Multiple Requests:

• If the DSAR is complex, we may extend the response time by up to two further months. If we need to extend the period, we will inform you within the initial one-month period, explaining the reason for the delay.

Consent
By submitting this form, you confirm that you have read, understood, and agree to these terms and conditions.