Security

Making a data subject access request

You have the right to a copy of the personal data we hold about you — a data subject access request, or DSAR. It is free in most cases and we respond within the statutory timescale.

2 min read

Usually freeNo charge for a standard request
One monthThe statutory response time
Your rightNo need to give a reason

What a DSAR gives you

A data subject access request (DSAR) is your right to obtain a copy of the personal data an organisation holds about you, along with information about how and why it is used. It covers your personal data — for example your details as a director or authorised user — rather than the company's business data, which you can already retrieve through your account history.

How to make one

You can make a DSAR in writing through the contact details on credicorp.co.uk, or via the account. You do not need to explain why you want the data. We may ask you to verify your identity first — see how we verify your identity — precisely so your personal data is never released to someone impersonating you. Telling us what you are looking for helps us find it faster.

Timescale and cost

We respond within one month of receiving a valid request and confirming your identity. In most cases there is no charge. For a complex or repetitive request we may extend the time or, rarely, charge a reasonable fee, but we will tell you if so and why. Straightforward requests are handled promptly and free.

Alongside access you have other data rights: to correct inaccurate data, to object to or restrict certain processing, to ask for erasure in defined cases, and to receive your data in a portable format. If you are unhappy with how we handle a request, you can complain about data or privacy.

Frequently asked questions

Does a data request cost anything?

In most cases it is free. Only for a complex or repeated request might we charge a reasonable fee or take longer, and we will always tell you in advance if that applies.

How long will it take?

We respond within one month of a valid request and confirming your identity. If a request is unusually complex we may extend that, and we'll explain why.

Do I have to say why I want my data?

No. You do not need to give a reason for a subject access request. We may verify your identity, but that is to protect your data, not to question your request.

Funding for UK limited companies

Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.