Under the UK GDPR you have the right to ask for a copy of the personal information we hold about you, and to ask us about how we use it. The formal name for this is a Subject Access Request (SAR).
How to ask
Three equally good routes:
- Inside the customer portal, on the Support tab, choose "Get a copy of my data".
- Use the General Support Enquiry form and write that you want a SAR.
- Email our privacy team directly using the address on our Contact Us page.
What you receive
A copy of the personal information we hold about you, the categories of recipients we have shared it with, the retention periods that apply, and a clear pointer to your other data rights (correction, deletion, restriction and objection). The information is sent securely.
Timeframe and cost
We will respond within one month. Where a request is complex we may extend this by up to two further months, telling you why. There is no charge for a reasonable request.
Identity check
For your protection we confirm your identity before releasing personal information. If we already have a verified record of you (you have applied for or held a loan with us), this is usually quick. For requests that come in cold we may need an additional document — we will tell you exactly what.
See also: How do I request a copy of my data?, How do I make a data subject access request?, How do I request a statement of account?.