Your right to a copy of everything an organisation holds on you is one of the strongest rights in modern law, and it comes with a stopwatch: one month. If yours has been ignored, the clock is now your evidence.
"The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: (a)the purposes of the processing; (b)the categories"…
"In Article 12, “the applicable time period” means the period of one month beginning with the relevant time, subject to paragraph 3. (2)“The relevant time” means the latest of the following— (a)when the controller receives the request in question;"…
Tell us what happened in your own words. We check it against the law above, free, and give you a straight answer either way. If the law is on your side, your formal letter, citing the exact provisions, is £2.99.
Check where I stand, free →UK GDPR applies UK-wide. This is guidance to help you understand your rights, not formal legal advice, and we're entirely independent: no affiliation with Citizens Advice, GOV.UK or any law firm. Every quotation above links to the official text so you can check us. Law verified current at July 2026.