Data protection
When someone asks about their data
- Log the request in Data protection → Log a request, the day it arrives. People don’t have to use the right words: "what do you have on me?" is a subject access request.
- You normally have one calendar month. The request page shows the deadline, and the dashboard reminds you.
- For a copy of their data, use "Download their data". Check it before sending, and remove anything about other people. Some notes are set aside for you to review by hand.
- To delete someone’s data, use "Erase their data". You’ll see what will go and what has to be kept (giving and Gift Aid records, for six years).
- Mark the request done, noting what you did.