Subject Access Request Policy

Data Protection Statement

At Vocalegal, we are fully committed to processing personal data fairly and lawfully while safeguarding the privacy and confidentiality of information related to our clients and suppliers.

The Data Controller for our company is the Chief Executive Officer (CEO). Anyone who believes that data protection principles have been compromised within Vocalegal should contact the CEO.

We use the personal data held by our company solely for fulfilling business contracts and communicating relevant information of legitimate interest to our clients and suppliers. Any disclosure of personal information to third parties will only occur with explicit permission from the individual unless there is a statutory or legal obligation for us to do so.

Subject Access Request (SAR) – Your Right to Access Information

As per the GDPR, you have the right to be informed about the information held about you and to know who has received or will receive your personal data. To access the information held by Vocalegal, please submit a formal written request. For verification purposes, we will also require proof of your identity to ensure the request is genuine. We have a Subject Access Request form for your convenience, but you are not obligated to use it; providing us with the relevant details will suffice.
Under the GDPR, you are entitled to access the following information:

1. The reasons for processing your data.
2. A description of the personal data held about you.
3. Details of anyone who has received or will receive your personal data.
4. Information about the origin of your data if it was not collected directly from you.

We are committed to assisting you with your data access request promptly and in line with GDPR requirements.

How We Handle SARs

Once you have submitted your Subject Access Request, along with proof of your identity, we will respond to you in writing within one month with your data or with an indication of timelines if we cannot provide your data within this time frame. All data requests will be completed within a maximum of three months in accordance with the GDPR. There will be no charge for making a Subject Access Request unless the request is ‘manifestly unfounded or excessive’. We may charge for multiple requests and this will be handled on a case-by-case basis.

Who to Contact

Please email our Data Protection Officer (DPO) (dpo@vocalegalglobal.com).

Subject Access Request form can be downloaded here:

Vocalegal Subject Access Request Form 

If emailing please include SUBJECT ACCESS REQUEST in the subject line of your email.