Skip to content
English
Contact us
  • There are no suggestions because the search field is empty.

Data Subject Access Request (DSAR)

How to request a copy of the personal data we hold about you.

Overview

Data Subject Access Request (DSAR) is a formal request from an individual for a copy of the personal information that a company holds about them. Under GDPR regulations, Capital on Tap is required to respond to these requests within one calendar month. This article explains how to submit a DSAR and what to expect during the process.

It's important to distinguish between a routine General Information Request and a formal DSAR.

General Information Requests

A General Information Request is a routine request for specific, narrow information related to your account or interactions, which is typically part of standard customer service.

  • Common Examples: A copy of specific call recordings, confirmation of specific account information or transactions, a timeline of events relating to a complaint, or copies of terms & conditions or agreements.

Important: Regular email is not a secure method for sharing sensitive or personal data.

How to Make a DSAR

If you wish to make a formal DSAR, please notify us by phone, email, or chat. We will then guide you through the necessary steps.

  1. Notify Capital on Tap. You can contact us via your preferred channel (phone, email, or chat) and state that you wish to make a formal Data Subject Access Request.
  2. Provide Identification Documents. We will send you a follow-up email requesting the necessary documents to verify your identity. This is a legal requirement.
  3. Wait for the response. Once we have received your necessary identification documents, we are legally required to complete your DSAR within one calendar month.

DSARs from a Third Party

If a third party is requesting a DSAR on your behalf, they must provide a Letter of Authority (LOA).

  • The LOA must be on company letterhead paper and follow all industry standards.
  • If the authorisation letter does not fit the standard, we will inform you, the Main Account Holder, and request a suitable copy before proceeding.
  • If the authorisation letter is suitable, we can proceed with the request.

FAQs

Why do I have to provide identification documents for a DSAR?

We are legally obligated to verify your identity before releasing all personal data to ensure your data is secure and that the request is legitimate. The one-calendar-month period for completion begins once we have received the necessary identification documents.

If I am unable to use the email address on file, can Capital on Tap still send me my DSAR information?

The response for a DSAR must come from the email address on file or via post. If you are unable to use the email on file, you will need to update your details or the DSAR will be sent to the verified home address on file.