Home / GDPR access request

GDPR subject access request letter

Article 15 GDPR lets you ask any company what personal data it holds about you, what it uses it for, who it shared it with and where it got it. It's free, and they must answer within one month. Want the data gone too? HenryProtect sends the requests and follow-ups for you.

We do this for you. You don't have to do anything.

  • Autopilot sends the request to every company we find, plus dozens of other data brokers that likely hold your data.
  • We send the reminders, handle the replies and keep track of the one-month deadline.
  • We rescan you every week. If your data comes back, we send a new request.
  • All you do is enter your name, confirm your email and give us permission. Free during the beta.

Write the access request yourself

Open in my email

Your details stay in your browser. We don't store or send anything.

How to send it

  1. Find the company's privacy email in its privacy policy. Our opt-out guides list it for 27 data brokers.
  2. Send it from the email address they know you by.
  3. Note the date. They have one month.
  4. Found out who sold your data? Send them an erasure request.

Questions

Is a subject access request free?

Yes. The first copy is free. A company may only charge a reasonable fee for extra copies, or refuse requests that are clearly unfounded or excessive.

How long do they have to answer?

One month from receiving your request. They can extend by two more months for complex requests, but must tell you within the first month.

Why ask where they got my data?

Article 15 gives you the right to know the source. That is how you find the data broker that sold your details, so you can stop it at the root.

Can I ask for access and erasure at once?

Yes. Our erasure letter does both. Use this access letter when you first want to know what they have.

We do all the work for you, free

Enter your name and we find where your data shows up. Autopilot then sends the removal requests in your name, chases companies that don't answer, handles their replies and rescans you every week. You don't have to do a thing.