GetMySAR

About GetMySAR

---

GetMySAR helps people across the UK use a right they already have but rarely exercise: the subject access request.

Under UK GDPR, an organisation holding your personal data has one month to give you a copy of it, and in almost all cases cannot charge you a penny for doing so. Most people never ask. The letter feels daunting, the law is unfamiliar, and it is hard to know what you are entitled to.

We make the first step straightforward. Our letter generator produces a correctly worded request in a few minutes, and our response checker reads what comes back and flags anything that looks to be missing. Both tools are free to use.

If you would rather not run the process yourself, we also offer a paid option that sends your request, tracks the one-month deadline and chases the organisation on your behalf.

Two of our tools are free to use, and between them they cover the two points where a subject access request usually goes wrong.

The letter generator turns a few short answers into a properly worded request, addressed to the right organisation and citing the right law. Getting the wording right at the outset matters more than people expect: a vague request invites clarification queries, and every query buys the organisation more time.

The response checker is for what happens next. When a reply finally lands, it is rarely obvious whether you have been given everything you asked for or only the parts that were easy to produce. The checker works through the response and points out what appears to be missing, so you can decide whether to accept it or push back.

People come to us at the point where they need evidence and cannot get at it any other way.

Employees preparing a grievance or an employment tribunal claim, who need the emails and meeting notes that mention them. People disputing a debt or trying to correct something wrong on their credit file. Tenants in a dispute with a landlord or letting agent. Drivers challenging a private parking charge. Patients asking for their own medical records.

The underlying right is the same in all of these. What changes is who you send the request to and what is worth asking for, and that is what our tools are built around.

We are based in Manchester and work with people anywhere in the UK.

A subject access request gets you more than a pile of documents. Alongside a copy of the personal data itself, the organisation has to tell you what it is using your data for, who it has been shared with, how long it intends to keep it, and where it came from if they did not collect it from you directly. It also has to say whether any decision about you was made automatically.

That supplementary information is the part most people do not know to ask for, and it is often the most revealing. Knowing who your data was passed on to can matter more than the data itself, particularly in a debt, tenancy or employment dispute.

Organisations do not always get this right. A response can arrive late, arrive incomplete, or arrive so heavily redacted that it tells you nothing useful. Some lean on an exemption that does not actually apply to your request.

The deadline is one calendar month. An organisation can extend that by a further two months where a request is genuinely complex, but it has to tell you inside the first month and explain why. Silence is not an extension.

If the deadline passes, or the response looks wrong, you can complain to the Information Commissioner's Office and it costs nothing to do so. Our response checker is built to help you work out whether you have grounds before you take that step.