Data Access Requests Policy

1. Introduction

At Healthy Homes Hub, we respect your privacy and are committed to complying with applicable data protection laws. This policy explains how you can exercise your rights to access the personal data we hold about you, in line with the General Data Protection Regulation (GDPR) and other applicable laws.

You have the right to request access to your personal data, understand how it is being used, and request corrections or deletions where appropriate. This is known as a Data Subject Access Request (DSAR).

2. What is a Data Access Request?

A Data Access Request allows you to request details of the personal data we hold about you, including:

  • The categories of personal data.

  • The purposes for which the data is processed.

  • The recipients or categories of recipients to whom the data has been or will be disclosed.

  • How long the data will be stored.

  • The source of the data, if not collected directly from you.

  • Your rights regarding the data (e.g., rectification, erasure, restriction of processing).

Under the GDPR, you are entitled to receive a copy of the personal data we hold about you in a structured, commonly used, and machine-readable format.

3. How to Submit a Data Access Request

To request access to your personal data, please contact us using one of the methods below. In your request, please provide sufficient information to verify your identity (e.g., your name, email address, and any relevant account details).

Upon receipt of your request, we will:

Acknowledge receipt of your request within 5 days.

Provide the information you have requested within 30 days, unless the request is complex or involves multiple requests, in which case we will inform you of any delays and provide the information within 90 days.

4. What to Include in Your Request

To help us process your Data Access Request efficiently, please include the following information:

  • Full name.

  • Email address associated with your Healthy Homes Hub account.

  • Details of the specific data or information you are requesting (optional but helpful).

  • Any additional information that may help us identify you and your personal data.

If you are submitting a request on behalf of someone else, you must provide proof of authorisation, such as a written consent form from the data subject or proof of power of attorney.

5. Response Time and Fees

We will respond to your Data Access Request as quickly as possible, and no later than 30 days from the date of receipt. If we require more time to process your request due to its complexity, we will notify you within the 30-day period and provide an extended deadline of no more than an additional 60 days.

In most cases, Data Access Requests are free of charge. However, if your request is manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee or refuse to act on the request.

6. What We Will Provide

In response to a Data Access Request, we will provide:

  • A copy of the personal data we hold about you.

  • Information about the purposes of processing, the categories of data being processed, and who has access to this data.

  • Any other relevant details, such as the storage period and your rights.

If we do not hold any personal data about you, or if your request is unfounded, we will inform you of this in writing.

7. Data Rectification, Deletion, and Other Rights

As part of your rights under the GDPR and other applicable laws, you have the right to request:

  • Data Rectification: If you believe that the data we hold about you is incorrect or incomplete, you can request that we correct or update it.

  • Data Deletion: You can request that we delete the personal data we hold about you, subject to legal or contractual obligations.

  • Restriction of Processing: If you object to the processing of your personal data, you can request that we restrict its use in certain circumstances.

  • Data Portability: You can request that we transfer your personal data to another service provider in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please follow the same process as outlined above for Data Access Requests.

8. Exemptions

In certain situations, we may not be able to fulfil your Data Access Request, such as when:

  • It affects the rights and freedoms of others.

  • It is manifestly unfounded or excessive.

  • It conflicts with legal obligations we must comply with.

If we are unable to comply with your request, we will inform you of the reasons within 30 days.

9. Contact Information

If you have any questions about submitting a Data Access Request or need assistance with your rights, please contact our Data Protection Officer at: Email: info@healthyhomeshub.uk