1. The Data Protection Act
The Data Protection Act 2018 controls how your personal information is used by organisations, businesses or the government.
The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR).
Everyone responsible for using personal data must follow strict rules known as ‘data protection principles’. These ensure that information is:
- used fairly, lawfully and transparently
- used for specified, explicit purposes
- adequate, relevant and limited to what is necessary
- accurate and, where necessary, kept up to date
- kept for no longer than necessary
- secured against unauthorised processing, access, loss or damage
Additional protection applies to sensitive personal information, including:
- race
- ethnic background
- political opinions
- religious beliefs
- trade union membership
- genetics
- biometrics (where used for ID)
- health
- sex life or orientation
There are separate safeguards for personal data relating to criminal convictions and offences.
Your Rights
Under the Data Protection Act 2018, you have the right to find out what personal data organisations hold about you. Your rights include:
- being informed about how your data is used
- accessing your personal data
- correcting inaccurate data
- erasing your data
- restricting or objecting to data processing
- data portability (reusing your data for different services)
You also have rights when your data is used for:
- automated decision-making (without human involvement)
- profiling to predict behaviour or interests
2. Find Out What Data an Organisation Holds
Write to the organisation to request a copy of the information they hold about you.
If it’s a public body, contact their Data Protection Officer (DPO). If there is no DPO listed, address your request to the company secretary.
Our address: UK Bailiff Services, 223 Bacup Road, Rossendale, BB4 7PA
How Long It Should Take
Organisations must respond to a data request within 1 month. If your request is complex, they may extend this by up to 2 additional months, but must inform you within the first month and explain why.
When Information Can Be Withheld
Data can be withheld if disclosure would:
- prevent or interfere with a criminal investigation
- affect national security or defence
- impact tax assessments or collections
- relate to judicial or ministerial appointments
The organisation does not have to tell you why information is being withheld.
How Much It Costs
Most data access requests are free. However, organisations may charge a reasonable fee if:
- you request a large volume of data
- processing the request would take considerable effort
3. Make a Complaint
If you believe your data has been misused or not handled securely, contact the organisation first.
If you're dissatisfied with the response, you can make a complaint to the Information Commissioner’s Office (ICO).
ICO registration:
ZB257978
Telephone:
0303 123 1113
Textphone:
0330 133 1818
Hours:
Monday to Friday, 9am to 4:30pm
ICO Address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Further Information
Please read our full Data Subject Access Request Policy for more details.


