Subject Access Requests


How to make a subject access request

The Data Protection Act 2018 and the UK General Data Protection Regulations (UK GDPR) gives you the right to request a copy of personal data we hold about you, or about someone else if they have appointed you to make a request on their behalf.

You have that right where we decide how and why that data is used (in legal terms, where we are the "controller"). If your data is held through your organisation (e.g. a school or local authority) where you use Widgit Online, that organisation is usually responsible (the "controller") for the personal data in their account. If your request is about that data, we will help point you to the right organisation, and we will support them as needed. If you are not sure, contact us anyway and we will help you find the right route.

Your request can be submitted in writing, in person or over the phone.

  • Email: privacy@widgit.com
  • Write to:

    Privacy
    Widgit Software
    Bishops House
    Artemis Drive
    Tachbrook Park
    Warwick
    CV34 6UD
    United Kingdom

  • Telephone: 01926 333680

For EEA Residents: You can contact us using the details above or via our EU representative by emailing eurep@widgit.com, telephoning +46 850249258 or writing to:

DPO
Olof Palmes Gata 29
4th Floor
111 12
Stockholm
Sweden

Your request will need to include:

  • Enough information for us to be able to identify you.
    Depending on the nature of your request, we may require evidence confirming your identity. If you are making a request on behalf of someone else, we will require proof of your right to do so.
  • Details of any of our products or services that you use (e.g. if you have purchased "InPrint").
  • A description of the information you are requesting. For example, you can request:
    • A copy of your personal data
    • Confirmation that we are storing or processing your personal data
    • Our reason(s) for processing your personal data
    • How long we might keep your personal data for
    • Whether your personal data has been or will be shared with other organisations or people.

If we do not have enough information to be able to locate the information you are requesting then we may come back to you with more questions.

What happens next?

We respond to subject access requests as soon as we can, and within one month of receiving them. If your request is complex or there are several requests, we may extend this by up to a further two months, and we will tell you if so and why.

After a request has been confirmed, we will gather and review the relevant information. We may need to redact some of the information if it identifies someone else and we do not have their permission to share it, and we may need to withhold all or part of the information in some circumstances.

After the information has been reviewed, we will send it to you with our response.

If you are unhappy with our response or the way that your request has been handled, you can make a data protection complaint.