Your Data Protection Rights
What UK data protection law entitles you to, and how to exercise those rights with us or with anyone else.
How do I make a subject access request?
Write to the organisation holding your data — for us, support@cipherknights.com — saying you are making a subject access request and describing what you want. There is no required form and no fee. The organisation must respond within one calendar month, extendable by two months for complex requests.
The rights you have
UK data protection law gives individuals a set of rights over their personal data. They are not absolute — each has conditions and exemptions — but organisations must consider every request properly and explain any refusal.
Most rights must be answered within one calendar month, free of charge. An organisation may extend by two further months for complex or numerous requests, but must tell you within the first month that it is doing so and why.
- To be informed — a clear explanation of how your data is used
- Of access — a copy of the personal data held about you
- To rectification — correction of inaccurate or incomplete data
- To erasure — deletion, where one of the specified grounds applies
- To restrict processing — pausing use while a dispute is resolved
- To data portability — receiving your data in a reusable electronic format
- To object — including an absolute right to object to direct marketing
- Regarding automated decision-making and profiling
Making a request to us
Email support@cipherknights.com. Tell us which right you are exercising and, if you are asking for a copy of your data, what you are looking for — a narrower request is usually answered faster and more usefully than "everything you hold".
We may ask you to verify your identity before disclosing personal data, which is a protection for you rather than an obstacle. The one-month clock starts once we have what we reasonably need to identify you and locate the data.
If you are not satisfied
Raise it with us first — most issues are a misunderstanding about scope or an exemption we have not explained well enough, and we would rather fix it directly.
You always retain the right to complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk or on 0303 123 1113. Complaining to the ICO does not cost anything and does not remove any other legal remedy available to you.
Your Data Rights — your questions answered
How long does an organisation have to answer a subject access request?
Can an organisation charge me for a copy of my data?
Does the right to erasure mean my data must always be deleted?
How do I complain to the ICO?
Question not answered here? Call +44 7424 967568 or email support@cipherknights.com.
You might also need
Ready to talk about your data rights?
Book a free, no-obligation consultation with our Leicester team, or call us and we will point you in the right direction whether or not you become a client.