What is a Subject Access Request (SAR)? 

You have the right to ask an organisation if they're using or storing your personal information. You can also ask them for copies of your personal information.

This is called the right of access and is also known as making a subject access request or SAR.

Find out more about Subject Access Requests, including what you can request and timelines for our response, on the Information Commissioner's Office (ICO) website.

Can I make a Subject Access Request for someone else?

Yes. You can make a SAR for someone else if you can prove you have the person's permission to get the information for them. If you submit a request for someone else, we will ask for proof such as:

  • written permission from the person; or
  • a power of attorney document.
How to make a Subject Access Request

The easiest way to make a Subject Access Request is by submitting the form below.

You can also make a request by: 

How does it work?

We’ll need to do some security checks before we begin working on your request to validate and confirm your identity. Once this verification has been completed, we’ll respond to your request within a month. 

Subject Access Request

Consent to process your data
As per our privacy policy. You can remove consent by contacting us dataprotection@emh.co.uk

Details of the person requesting the information
Are you the data subject?

Tell us what data you are requesting
Please indicate under which service your request falls and what data and/or documents you would like to see * Tick all that apply
If you wish to receive copies of emails, would you like this to include emails where you are the sender and/or recipient? *
Please include any dates to help with the search if possible

Declaration

Proof of Identity

Information requested on behalf of the Data Subject will only be processed if written consent is enclosed with this form. Information can only be sent to current customers of the organisation at their listed address. Non-organisation customers or representatives requesting information will need to provide evidence of their identity and address. The organisation may exclude information that relates to other individuals or third parties in line with Article 15 of the GDPR.

Which proof of your personal identity will you be uploading? *
Which proof of your address will you be uploading? *

Authority to act on behalf of the data subject
Please upload written authority from the data subject allowing you to act on their behalf. You can upload either an image or a file below.