How to make a Data Protection Subject Access/Erasure Request
This policy concerns personal information held by Avantia Insurance Limited, trading as HomeProtect, your right of access to that information, and how to make a subject access/erasure request.
Definition of ‘personal data’; ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
In line with applicable Data Protection Legislation you have the right to access personal data we hold about you. You also have the right, in certain circumstances, to have personal data erased.
Which records are covered?
Data Protection Legislation provides you with a right of access to/erasure of personal information we hold about you. The right applies to information in our own business records – our files and information systems - and information transferred from suppliers and business partners such as price comparison websites. We shall, however, need sufficient details for us to locate the information readily – we cannot undertake open-ended searches. i.e. if you require a telephone conversation we need to know the date of the call and the telephone number dialled from.
Making a request for personal information
If you wish to make a request for information we hold about you, you can:
- Download the form and email to firstname.lastname@example.org
- Put your request in a letter and send it to:
29 Thames Street
Please provide as much detail as possible to help us find the information. The more details you can provide, the more likely we are to be able to find the information you seek.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
We try to respond to all legitimate requests within one month but it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
How will we send the personal information?
We will send your personal data to you in a password protected file, attached to an email. We will provide the password via a separate medium, i.e. telephone or SMS.