Subject Access Requests (SARs)

To request a copy of your personal data, please email: info@c4f.co.uk

Your request should clearly state that you are making a Subject Access Request. We may need to verify your identity before we can respond.

What You Can Expect

Once we have received your request and verified your identity:

• We will respond within one calendar month.
• If your request is complex or involves multiple elements, we may extend this period by up to two additional months—we will inform you if this applies.
• You will receive a copy of the personal data we hold about you, along with relevant information such as:
• Why we process your data
• What types of data we hold
• Who your data may be shared with
• How long we keep your data
• Your rights under data protection law

Fees and Exemptions

• There is no charge for submitting a Subject Access Request.
• However, if your request is manifestly unfounded, excessive or repetitive, we may charge a reasonable fee to cover the administrative costs of responding—or we may refuse to act on the request.
• If you request additional copies of your data, we may also charge a reasonable fee.

Third-Party Information

If your personal data includes information that identifies another individual, we may need to redact or withhold that part of the data unless:

• The third party has given consent, or
• It is reasonable to provide the data without their consent

We comply with relevant exemptions under the Data Protection Act 2018 where applicable.