Your right
Under UK GDPR Article 15 you have the right to ask us whether we are processing your personal data and, if so, to receive a copy of that data along with information about how we use it. This right is commonly called a Subject Access Request, or SAR. This page explains how to make a request to Unhectic Limited and what to expect in response.
How to make a request
Email [email protected] with the subject line “Subject Access Request” and include:
- Your full name
- The email address(es) and any other identifiers we may know you by
- A clear description of the information you would like (or simply ask for everything we hold)
- Proof of identity (a scan of a photo ID — passport, driving licence, or similar)
You do not need to give a reason. You may ask for a specific subset of data — for example, just the emails between us, or just any account record — and that often produces a faster, more useful response than asking for everything.
How we verify your identity
We need to be confident we are sharing the information with the right person. We may ask follow-up questions if the proof of identity provided does not match the records we hold. The verification step is the only reason we ever delay a SAR, and we keep it proportionate to the sensitivity of the data.
Timeline
We respond within one calendar month of receiving a valid request. The clock starts when we have what we need to verify your identity and to understand the request. In complex cases or where multiple requests are made together, we may extend by a further two months and we will tell you within the first month if we need to, with a brief explanation of why.
Format of response
We respond in writing by email. Where the data set is large, we may share documents through a secure file-share link rather than as attachments. Where the underlying data is in a structured format, we provide it in a commonly used and readable form.
Fees
We do not charge a fee for a Subject Access Request, except where the request is manifestly unfounded or excessive (for example, repetitive). In those rare cases we may charge a reasonable fee or refuse to act on the request, and we will explain why in writing.
Other rights
As well as access, UK GDPR gives you rights of rectification, erasure, restriction of processing, portability, objection, and withdrawal of consent. These rights are summarised in our Privacy Policy. To exercise any of these other rights, please contact us using the same email address and explain what you would like.
Complaints
If you are dissatisfied with how we handle your request, please follow our Complaints Procedure. You also have the right to complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/. Nothing in this procedure removes that right.