Subject Access Requests (SARs)

Under the UK General Data Protection Regulation (UK GDPR), you have the right to access personal data that C4F holds about you. This is known as a Subject Access Request (SAR).

How to Make a Request

To request a copy of your personal data, please email:
info@c4f.co.uk

Your request should clearly state that you are making a Subject Access Request. We may need to verify your identity before we can respond.

What You Can Expect

Once we have received your request and verified your identity:

• We will respond within one calendar month.

• If your request is complex or involves multiple elements, we may extend this period by up to two additional months—we will inform you if this applies.

• You will receive a copy of the personal data we hold about you, along with relevant information such as:

  • Why we process your data

  • What types of data we hold

  • Who your data may be shared with

  • How long we keep your data

  • Your rights under data protection law

Fees and Exemptions

• There is no charge for submitting a Subject Access Request.

• However, if your request is manifestly unfounded, excessive or repetitive, we may charge a reasonable fee to cover the administrative costs of responding—or we may refuse to act on the request.

• If you request additional copies of your data, we may also charge a reasonable fee.

Third-Party Information

If your personal data includes information that identifies another individual, we may need to redact or withhold that part of the data unless:

• The third party has given consent, or

• It is reasonable to provide the data without their consent

We comply with relevant exemptions under the Data Protection Act 2018 where applicable.