// Legal HQ

Data Subject Access Request (DSAR) Portal

Exercise your statutory privacy rights under UK GDPR and the Data Protection Act 2018. Official portal for submitting Data Subject Access Requests (DSAR), erasure, and data export.

Last updated: August 22, 2026

DATA SUBJECT ACCESS REQUEST (DSAR) & STATUTORY PRIVACY PORTAL

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), you possess fundamental legal rights to access, inspect, correct, export, restrict, and delete the personal data held about you by FozDigital LTD, trading as BudgetFitter (Data Controller, Company No. 13470802, ICO Registration ZB348787, 124 City Road, London, EC1V 2NX, United Kingdom).

This official portal provides a clear, secure, and prompt mechanism for submitting formal data rights requests across all BudgetFitter services (Website, iOS & Android Mobile Apps, Chromium Browser Extension, and The Fitter Newsletter).

TABLE OF CONTENTS

  1. 1. STATUTORY PRIVACY RIGHTS YOU CAN EXERCISE
  2. 2. IDENTITY VERIFICATION & ANTI-FRAUD SAFEGUARDS
  3. 3. HOW TO SUBMIT A FORMAL DSAR REQUEST
  4. 4. STATUTORY RESPONSE TIMELINES & FEES
  5. 5. DATA EXPORT FORMAT & DELIVERY
  6. 6. SUPERVISORY AUTHORITY & ICO COMPLAINTS PROCEDURE

1. STATUTORY PRIVACY RIGHTS YOU CAN EXERCISE

You may submit a formal request to exercise any of the following statutory data subject rights:

  • Right of Access (Article 15 UK GDPR): Request a complete copy of all personal data we process concerning you, including account records, followed brands, and mission logs.
  • Right to Rectification (Article 16 UK GDPR): Request the correction of inaccurate, outdated, or incomplete personal details in your profile.
  • Right to Erasure / “Right to be Forgotten” (Article 17 UK GDPR): Request the permanent, irreversible deletion of your account and all associated personal data from our active databases. (For self-service steps, see our Account Deletion Guide).
  • Right to Restriction of Processing (Article 18 UK GDPR): Request that we temporarily freeze or restrict the active processing of your data while an accuracy or objection claim is verified.
  • Right to Data Portability (Article 20 UK GDPR): Request a portable, machine-readable digital export (JSON/CSV) of the personal data you provided to us, suitable for transfer to another digital service.
  • Right to Object (Article 21 UK GDPR): Object to the processing of your data based on legitimate interests or for direct marketing communications.
  • Right to Withdraw Consent (Article 7(3) UK GDPR): Withdraw previously given consent for newsletter dispatches or mobile push notifications at any time.

2. IDENTITY VERIFICATION & ANTI-FRAUD SAFEGUARDS

To protect your privacy and prevent unauthorized third parties from obtaining your personal information through fraudulent requests (social engineering), we must verify the identity of the requester before releasing or modifying any personal data.

  1. Registered Email Origin: All email requests must be submitted directly from the email address registered to your BudgetFitter account.
  2. Member Dashboard Authentication: Where applicable, submitting your request while securely logged into your member dashboard serves as instant automated verification.
  3. Third-Party Authorisation: If you are an authorized representative or legal counsel acting on behalf of a data subject, you must provide a signed letter of authority or valid Power of Attorney along with proof of identity.

3. HOW TO SUBMIT A FORMAL DSAR REQUEST

You can submit a formal Data Subject Access Request using any of our verified submission channels:

  1. Direct DPO Email: Send an email to our Data Protection Officer at [email protected] with the subject line “Formal DSAR Request – [Your Name]” detailing the specific right(s) you wish to exercise.
  2. Web Contact Portal: Complete our verified web form at https://budgetfitter.uk/contact-us/ selecting “Privacy & Data Rights” as your inquiry category.
  3. Self-Service Member Dashboard: If you simply wish to update profile details, manage followed brands, or delete your account, you can perform these actions instantly via your Account Settings.

4. STATUTORY RESPONSE TIMELINES & FEES

  • Free of Charge: Submitting a DSAR is entirely free of charge. We do not charge fees for fulfilling legitimate statutory requests. (We reserve the right under UK GDPR to charge a reasonable administrative fee only where requests are manifestly unfounded or excessive).
  • One Calendar Month Response Window: In accordance with Article 12(3) of the UK GDPR, we acknowledge receipt promptly and provide a comprehensive response within one (1) calendar month of receiving your verified request.
  • Complex Extensions: In exceptional cases involving complex multi-platform data reconciliation or multiple concurrent requests, we may extend this period by up to two additional months, providing formal written notification within the initial month explaining the delay.

5. DATA EXPORT FORMAT & DELIVERY

Data access and portability responses will be delivered in a secure, encrypted digital format. Structured data exports (such as followed brands, saved deals, and account profile history) are generated in standard machine-readable JSON or CSV formats, transmitted via secure password-protected links.

6. SUPERVISORY AUTHORITY & ICO COMPLAINTS PROCEDURE

We are committed to resolving any privacy concerns swiftly and amicably. However, if you believe that our processing of your personal data violates UK data protection legislation, or if you are dissatisfied with our response to your DSAR, you have the statutory right to lodge a formal complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
Helpline: 0303 123 1113 | Website: https://ico.org.uk

Data Controller Contact Details:
FozDigital LTD (t/a BudgetFitter)
Attn: Data Protection Officer (DPO)
124 City Road, London, EC1V 2NX, United Kingdom
DPO Email: [email protected]
General Privacy Email: [email protected]