GDPR Subject Access Request (SAR) — Request Your Personal Data

Subject: Subject Access Request (GDPR) – [Your full name]

To: [Company name / Data Protection Officer]
Email/Post: [Company privacy email or postal address]
Date: [DD Month YYYY]

Dear [Company name / Data Protection Officer],

I am writing to make a Subject Access Request under the UK GDPR (and/or EU GDPR as applicable).

Please provide a copy of the personal data you hold about me, along with the following information:

• the purposes you are processing my personal data for
• the categories of personal data concerned
• the recipients (or categories of recipients) you have shared my personal data with
• the source of my personal data (if it was not collected from me directly)
• the retention periods for my personal data (or how you determine them)
• details of any automated decision-making or profiling (if applicable)

My details:
Full name: [Your full name]
Email(s) used with your service: [Email address]
Username/account ID (if known): [Username / Account ID]
Address (if relevant): [Your address]
Phone number (if relevant): [Your phone number]

Please include copies of relevant data across your systems, for example:

• account information and profile data
• transaction/payment history (if applicable)
• support tickets, emails, chat logs, and call notes
• marketing preferences and communication history
• device, log, and IP data linked to my account (if applicable)

I would prefer to receive the information by email in a commonly used electronic format.

If you need any additional information to verify my identity, please let me know as soon as possible.

Yours faithfully,
[Your full name]
[Your email address]
[Your phone number]