What a subject access request is and how to see the information we hold about you.

What is a subject access request

You have the right to make a request for personal information about yourself, or another living person if they have given their consent. This is called a subject access request.

You can ask for: 

  • confirmation that your personal data is being processed by us
  • access to your personal data
  • the reasons why we're using your data 
  • information such as who we share your information with, our legal reason for using it, how long we keep your data for.  This  usually corresponds with the information provided to you when we collect your data

Read our pdf Subject Access Request Policy (358 KB) .

Requests for information about deceased individuals

The right to make a subject access request only applies to living individuals. If you would like to request information about a deceased individual, you must do so under the Freedom of Information Act.

How to make a subject access request

The easiest way to make a subject access request is by using our web form.

We don't accept requests made through third party apps or websites that need us to:

  • open a link to access the request
  • upload data to a portal

This is for information security reasons and does not affect your rights.

The documents you'll need

When you make a request we'll need to see some documents that confirm: 

  • evidence of your identity, such as a passport, driving licence or birth certificate 
  • evidence of your current address, such as a utility bill, bank statement or other official document

Here is a  pdf full list of acceptable documents (35 KB)  that can be used as proof of your identity. 

Make a request

To complete our form you'll need to have an electronic copy of your certified ID and proof of address ready to upload.

Make a subject access request

CCTV in Bristol

We only keep CCTV images for 28 days.

You have the right to request Closed Circuit Television (CCTV) footage of yourself.

Your additional rights

You can ask to:

  • have your information corrected
  • have your information deleted
  • restrict how we process your information
  • stop processing your information
  • stop automated decision profiling

Make an individuals right request

Your privacy

The combined UK data protection laws, UK GDPR (General Data Protection Regulation) and DPA 2018 (Data Protection Act), control the way we store and use your personal information.

Your privacy is important to us and we take great care to protect it.

Privacy statement: what we do with your personal data 

How long we keep our records 

Our spreadsheet Retention Schedule (317 KB)  shows how long we keep records for.