Subject access requests
You have the right to ask for access to the personal data we hold about you. You can do this by making a subject access request.
If your request is for pre-1996 records, it may take us longer to process. This is because we have to get them from our physical archives.
Before you start
Please make sure you're aware of the following:
- what you can request
- proof of identity
- making a subject access request for someone else
- processing times
- what we'll send you
What you can request
You can make a subject access request to find out:
- what personal information we hold about you
- how we are using it
- who we are sharing it with
- where we got your data from
Proof of identity
We’ll need to identify you and check your details so that we can process your subject access request.
When completing your online request, you’ll be asked to upload a form of ID that shows your name and date of birth (eg a photo of your driving licence).
This will be deleted from our systems as soon as we have verified your ID.
Making a subject access request for someone else
Parents and guardians can make a subject access request for children aged 12 or under.
Children aged 13 and above are considered to be able to understand their information rights. Parents can act on their child’s behalf if they're over 13 – but only with the child’s permission.
AQA reserves the right to ask parents to act on their child’s behalf where it's in the child’s best interests.
We aim to process all valid requests within 30 working days.
It can take us longer to process a request if it's complex or involves records older than 2002. We’ll let you know if your request is delayed.
What we'll send you
When we respond to your request, we'll tell you whether or not we process any of your personal information.
If we do hold your data, we’ll send you copies of it. The information we send you may have data removed. If our records include sensitive information or information about other people, we can't release this to you due to the Data Protection Act 2018.
Your subject access request will stay in our system for two years, after this it will be deleted.
If you have any questions, or you’d like to discuss an existing request, please email email@example.com
To find out more about the information we collect, what we do with it, how we collect it and keep it secure, read our privacy notice.
You can find out more about what to expect when you make a subject access request on the Information Commissioner’s Office website