Jump to a section
Learn how to request a copy of the personal data we hold about you.
Overview
A Data Subject Access Request (DSAR) is a formal request from an individual for a copy of the personal data a company holds about them. Under GDPR regulations, Capital on Tap is required to respond to these requests within one calendar month. This article explains how to submit a DSAR and what to expect during the process.
It's important to distinguish between a routine general information request and a formal DSAR. For more on how we handle your data generally, see our Privacy Policy.
General information requests
A general information request is a routine request for specific, narrow information related to your account or interactions. This is typically handled as part of standard customer service.
Common examples include:
-
A copy of specific call recordings
-
Confirmation of specific account information or transactions
-
A timeline of events relating to a complaint
-
Copies of terms and conditions or agreements
Important: Regular email is not a secure method for sharing sensitive or personal data.
How to make a DSAR
If you wish to make a formal DSAR, please contact us by phone, email, or chat. We will then guide you through the necessary steps.
-
Notify Capital on Tap: State that you wish to make a formal Data Subject Access Request.
-
Provide identification documents: We will send you a follow-up email requesting the necessary documents to verify your identity. This is a legal requirement.
-
Wait for the response: Once we have received your necessary identification documents, we are legally required to complete your DSAR within one calendar month.
DSARs from a third party
If a third party is requesting a DSAR on your behalf, they must provide a Letter of Authority (LOA).
The LOA must be on company letterhead and follow all industry standards.
If the authorisation letter doesn't meet the standard, we'll let you know as the main account holder. We'll then request a suitable copy before proceeding.
Why do I have to provide identification documents for a DSAR?
We are legally required to verify your identity before releasing any personal data. This ensures your data stays secure and that the request is legitimate. The one-calendar-month period for completion begins once we have received the necessary identification documents.
If I am unable to use the email address on file, can Capital on Tap still send me my DSAR information?
The response for a DSAR must come from the email address on file or via post. If you're unable to use the email on file, you'll need to update your details. Otherwise, we'll send the DSAR to the verified home address on file.