What a subject access request is and how to see the information we hold about you.
What is a subject access request
You have the right to make a request for personal information about yourself, or another living person if they have given their consent. This is called a subject access request.
You can ask for:
- confirmation that your personal data is being processed by us
- access to your personal data
- the reasons why we're using your data
- information such as who we share your information with, our legal reason for using it, how long we keep your data for. This usually corresponds with the information provided to you when we collect your data
Read our pdf Subject Access Request Policy (496 KB) .
Requests for information about deceased individuals
The right to make a subject access request only applies to living individuals. If you would like to request information about a deceased individual, you must do so under the Freedom of Information Act.
How to make a subject access request
The easiest way to make a subject access request is by using our web form.
We don't accept requests made through third party apps or websites that need us to:
- open a link to access the request
- upload data to a portal
This is for information security reasons and does not affect your rights.
The documents you'll need
When you make a request we'll need to see some documents that confirm:
- evidence of your identity, such as a passport, driving licence or birth certificate
- evidence of your current address, such as a utility bill, bank statement or other official document
Here is a pdf full list of acceptable documents (35 KB) that can be used as proof of your identity.
Make a request
To complete our form you'll need to have an electronic copy of your certified ID and proof of address ready to upload.
CCTV in Bristol
We only keep CCTV images for 28 days.
You have the right to request Closed Circuit Television (CCTV) footage of yourself.
Your additional rights
You can ask to:
- have your information corrected
- have your information deleted
- restrict how we process your information
- stop processing your information
- stop automated decision profiling
Make an individuals right request
Your privacy
The combined UK data protection laws, UK GDPR (General Data Protection Regulation) and DPA 2018 (Data Protection Act), control the way we store and use your personal information.
Your privacy is important to us and we take great care to protect it.
Privacy statement: what we do with your personal data
How long we keep our records
Our spreadsheet Retention Schedule (319 KB) shows how long we keep records for.