We are committed to upholding your data protection rights. If you are a member of the public and wish to make a request regarding your personal data, please follow the guidance below.
Your rights under the Data Protection Act 2018
Under the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), you have the following rights in relation to your personal data:
- Right to be informed – you have the right to be told how your data is collected, used, stored, and shared
- Right of access – you can request access to the personal data we hold about you
- Right to rectification – you can ask us to correct inaccurate or incomplete data
- Right to erasure – also known as the 'right to be forgotten', you can request deletion of your data in certain circumstances
- Right to restrict processing – you can ask us to limit how we use your data
- Right to data portability – you can request your data in a format that allows you to move it to another service
- Right to object – you can object to the processing of your data in certain situations
- Rights related to automated decision-making and profiling – you have rights where decisions are made solely by automated means
For more information, visit the UK Government’s data protection guidance or the Information Commissioner’s Office (ICO).
Submitting a Data Access Request (Subject Access Request)
You have the right to request access to the personal data we hold about you.
To make a request:
- Complete our Data Subject Access Request (SAR) application or email us at subjectaccessrequests@copfs.gov.uk
- Include your full name, contact details, and a clear description of the information you are requesting.
- We may ask for proof of identity to verify your request.
Making a data complaint
If you believe your data has been mishandled or your rights have not been respected, you can submit a complaint.
To submit a complaint:
- Email us at dataincidents@copfs.gov.uk
- Provide your name, contact details, and a detailed description of your concern
- We will acknowledge your complaint and aim to respond within 20 working days
Requesting rectification of your data
If you believe the data we hold about you is inaccurate or incomplete, you can request a correction.
To request rectification:
- • Email us at dataincidents@copfs.gov.uk
- • Include your name, contact details, and specify the data you believe is incorrect along with the correct information.
Requesting erasure of your data (right to be forgotten)
You may request the deletion of your personal data under certain circumstances.
To request erasure:
- Email us at dataincidents@copfs.gov.uk
- Provide your name, contact details, and explain why you believe your data should be erased.
What happens next
Once we receive your request, we will:
• Acknowledge receipt within 5 working days
• Review and process your request in accordance with data protection laws
• Respond within one calendar month, or inform you if more time is needed
Getting help
If you need assistance with your request or have any questions, please contact any of the mailboxes listed and a member of our team will be sure to help.