Subject Access Request Pollicy

Subject Access Request (SAR) policy for In Professional Development

1. SAR overview
   • Your rights, commonly referred to as subject access, is outlined by the GDPR and Data Protection Act. This gives you the right to see a copy of the information we hold about you and be entitled to be:
     • told whether any personal data is being processed;
     • given a description of the personal data, the reasons it is being processed, and whether it will be given to any other organisations or people;
     • given a copy of the information comprising the data; and given details of the source of the data (where this is available).
   • Submitting a SAR
     • In most cases we will not or cannot charge a fee to comply with a subject access request. However, we reserve the right to charge a reasonable fee for the administrative costs of complying with a request if:
       • it is manifestly unfounded or excessive; or
       • an individual requests further copies of their data following an initial request.

       The reasonable fee will be applied in line with the administration costs incurred to fulfill the request. We will inform you if we intend to charge a fee before undertaking the SAR.

       We are within our rights under GDPR to refuse to comply with a manifestly unfounded or excessive request. 

     • A SAR can be submitted in writing
       • By post: FAO Data Controller, In Professional Development, Suite 6a, Blackthorn House, Skull House Lane, Appley Bridge, WN6 9DB
       • Electronically: info@inpd.co.uk with the subject line Subject Access Request

Responding to a SAR

• On receiving a SAR we may request further information before processing the request. Further information may be requested to:
  • Ascertain and confirm the identity of the individual submitting the SAR or the authority of a third party on the applicants behalf. We may not respond to an SAR until we have confirmed the identify of an applicant or authority of a third party. This is to avoid personal data about one individual being sent to another, accidentally or as a result of deception.
  • Acquire all the necessary information needed to satisfy the SAR and find the personal data covered by the request. We may not respond to an SAR until we have received this information.
• Applicants submitting a SAR can expect a response within 30 days of their payment being received and funds cleared in the company’s bank account.
• All responses to SAR will be issued in as clear and intelligible manner as is deemed reasonable.
• Where data requested contains reference to third party personal data, aspects of the SAR will be redacted to protect the third party.

For further information please contact: