13.1 In accordance with your legal rights under applicable law, you have a 'subject access request' right under which can request information about the Personal Data that we hold about you, what we use that Personal Data for and who it may be disclosed to as well as certain other information.
13.2 Usually we will have a month to respond to such as subject access request. We reserve the right to verify your identity if you make such a subject access request and we may, in case of complex requests, require a further two months to respond.
13.3 Usually we will not charge for responding to a subject access request although we may charge a fee for dealing with (or reject) any manifestly unreasonable or excessive requests for access.
13.4 We may also require further information to locate the specific information you seek before we can respond in full and apply certain legal exemptions when responding to your request.
13.5 Under Data Protection Law you also have the following rights, which are exercisable by making a request to us in writing:
(a) that we correct Personal Data that we hold about you which is inaccurate or incomplete;
(b) that we erase your Personal Data without undue delay if we no longer need to hold or process it;
(c) to object to any automated processing (if applicable) that we carry out in relation to your Personal Data, for example if we conduct any automated credit scoring;
(d) to object to our use of your Personal Data for direct marketing;
(e) to object to and/or restrict the use of your Personal Data for purposes other than those set out above unless we have a legitimate reason for continuing to use it; or
(f) that we transfer Personal Data to another party where the Personal Data has been collected with your consent or is being used to perform contact with you and is being carried out by automated means.
13.6 If you would like to exercise any of the rights set out above, please contact us at the address below.
13.7 If you make a request and are not satisfied with our response, or believe that we are illegally processing your Personal Data, you have the right to complain to the Information Commissioner's Office (ICO) – see https://ico.org.uk/.