Would you like to know which personal data GraydonCreditsafe processes about you, have your data corrected or exercise another privacy right? You can submit a GDPR request.



1. What types of requests can you submit?

Depending on your circumstances, you can submit different types of requests relating to your personal data.


1.1 Accessing your personal data (SAR)

With a Subject Access Request (SAR), you can request access to the personal data that GraydonCreditsafe processes about you. You will receive information about the personal data we hold about you and how it is processed.


1.2 Having your personal data corrected

Do you believe that personal data GraydonCreditsafe processes about you is inaccurate or incomplete? You can submit a rectification request. Please indicate as clearly as possible:

  • which information you believe is inaccurate or incomplete

  • what you believe the correct information should be

  • which information or supporting evidence supports your request

Some of the data processed by GraydonCreditsafe comes from public or official sources. In certain cases, you may therefore need to contact the original source to have the information corrected.


1.3 Having your personal data deleted

Under the GDPR, you can request the deletion of your personal data in certain circumstances. The right to deletion, also known as the right to be forgotten, is not absolute. Whether data can be deleted depends, among other things, on the type of data, the purpose for which it is processed and any legal obligations to retain it.


Would you like to have data deleted? Please indicate as clearly as possible which personal data your request relates to and why you believe it should be deleted. Where possible, include relevant supporting information.


1.4 Restricting the processing of your personal data

In certain circumstances, you can ask us to restrict the processing of your personal data. This may apply, for example, if:

  • you dispute the accuracy of your personal data

  • you believe there are valid grounds for restricting the processing

  • the data is no longer required for the purpose for which it was collected

Please indicate as clearly as possible which data your request relates to and why you would like its processing to be restricted. Where possible, include supporting documents or screenshots showing which data your request relates to.



2. Before submitting a request

Do you have a question about information you believe is incorrect, or would you first like more information about certain data? Contact our Customer Support team. Our team can investigate your query and, where possible, help resolve the issue.

Have you already contacted us and still believe that information is incorrect, would you like to verify certain information, or would you like to exercise a privacy right? You can then submit a GDPR request.



3. How do you submit a GDPR request?

Open a ticket and select GDPR Request under Type. Then select the type of request that applies to your situation. To process your request, we need sufficient information to verify your identity and locate the relevant data.


We may therefore ask you to provide:

  • company name and/or name of the applicant

  • applicant’s email address

  • customer reference number, if applicable

  • information that allows us to verify your identity and address

  • sufficient information to determine which personal data your request relates to

  • any supporting evidence relevant to your request

Depending on the type of request, additional information or documents may be required.



4. What information do you need for a SAR?

Additional requirements apply to a Subject Access Request (SAR).

  • Your SAR must be submitted in writing.

  • Provide sufficient information for us to identify you and, where applicable, your account.

  • Provide sufficient information for us to determine exactly which personal data or information you are requesting.

  • You must provide two forms of identification. At least one of these must be a form of photo identification, such as a driving licence.

We can only process your SAR once we have received the required information and identification documents.

These checks are necessary to verify your identity before we provide personal data to you.



5. When will you receive a response?

We aim to process your request as quickly as possible. Under the GDPR, a request must generally be handled within one month. This period starts once we have the information required to process your request. In certain circumstances, the deadline may be extended, for example if a request is complex or if multiple requests have been submitted. If more time is required, we will inform you.



6. Would you like to request a recording of a telephone call?

Would you like access to a recording of a telephone call in which you participated? Please provide as much information about the call as possible, for example:

  • the date

  • the time

  • the telephone number

  • the subject of the call

This will help us identify the relevant recording more easily.


Please note: GraydonCreditsafe does not record all telephone calls. Call recordings are generally retained for 60 days. It is therefore possible that the recording of the specific call you are requesting is no longer available.



7. Would you like to know how GraydonCreditsafe processes personal data?

See How does GraydonCreditsafe handle personal data? or read our Privacy Notice for more information.