We will not ask for a fee unless we think your request is unfounded, repetitive or excessive.  Where a fee is necessary, we will tell you before answering your request.

We aim to reply to valid requests within one month.  It may take us longer if the request is complicated or you have made several requests.  We will let you know if we think it will take us longer than one month.  To help us we may ask you for more detail about your request.

We may not be able to address your request in full.  For example, if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request differently.

• Access: You can ask for a copy of your information that we hold.
• Correct: You can ask that we correct (or rectify) any information about you that is incorrect. We will be happy to do so, but will need to check the accuracy of the information first.
• Erase: You can ask that we erase (or delete) your information if you think we no longer need it for the purpose we collected it. We may not be able to comply with your request. For example, where we need to keep your information to comply with our legal obligations or establish, exercise or defend legal claims.
• Restrict: You can ask us to stop processing your information. This means that we will keep it but no longer actively use it (in other words we will archive it).  We may not be able to comply with your request.  For example, where we need to use your information to comply with our legal obligations or establish, exercise or defend legal claims.
• Object: You can object to our use of your information if you think your fundamental rights and freedoms to data protection outweigh our legitimate interest in using the information. If we can demonstrate we have compelling legitimate interests to use the information we may continue to do so.
• Transfer: You can ask us to transfer your information to you or another organisation in an appropriate electronic format.
• Object to automated decisions: If we make a decision about you based solely by automated means (that is, with no human input), and our decision produces a legal effect concerning you or significantly affects you, you may have the right to contest that decision, express your point of view and ask for a human review. These rights do not apply where we are authorised by law to make such decisions and have adopted suitable safeguards in our decision-making processes to protect your rights and freedoms.
• More information: You can contact us to ask us for more information about your information that we hold, what we use your information for, who we give your information to, whether we transfer it abroad, how we protect it, how long we keep it, what rights you have, how you can make a complaint, where we get your information from and whether we have carried out any automated decisions using your information.