easySAR is built on a zero-storage principle. All personal information you enter into the tool â your name, address, date of birth, and the SAR letters generated â exists only in your browser's memory during your session. When you close the tab, it's gone. We never transmit your personal data to our servers.
easySAR is operated by [Company Name], registered in England and Wales. Our registered address is [Address]. You can contact us at dpo@easydsar.org.
We are registered with the Information Commissioner's Office (ICO) under registration number [ICO Registration Number].
When you use easySAR to generate Subject Access Requests, you enter personal information such as your name, address, date of birth, and email address. This data is processed entirely within your browser and is never sent to our servers. It is not stored, logged, or accessible to us.
Like most websites, our web server automatically receives standard technical information when you visit, including:
This data is held in server logs for a maximum of 30 days and used solely for security monitoring and abuse prevention.
We use privacy-respecting analytics to understand how the tool is used (e.g. which steps users reach, which categories are most searched). No personally identifiable information is included in analytics data. [Analytics provider details to be inserted].
To prevent abuse, we use localStorage in your browser to record the number of SAR submissions made per day. This data is stored only on your device and is not accessible to us.
Where we process any personal data (limited to technical/server log data), our legal basis is:
Server log data (IP addresses, access records) is retained for a maximum of 30 days before automatic deletion. We do not retain any data entered into the SAR tool. Email enquiries sent to us are retained for 12 months.
We do not sell, rent or share your personal data with third parties for marketing purposes. We may share technical data with:
All data processors are bound by UK GDPR-compliant Data Processing Agreements.
You have the following rights regarding any personal data we hold about you:
To exercise any of these rights, contact us at dpo@easydsar.org. We will respond within one calendar month.
easySAR uses minimal cookies. Please see our Cookie Policy for full details. We do not use cookies for advertising or third-party tracking.
We implement appropriate technical and organisational measures to protect against unauthorised access, alteration, disclosure or destruction. Because personal data entered into the tool never reaches our servers, the risk of a data breach affecting your SAR information is eliminated by design.
easySAR is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact dpo@easydsar.org and we will delete it promptly.
We may update this policy from time to time. We will notify users of material changes by posting a notice on the homepage. The "last updated" date at the top of this page will always reflect the most recent revision.
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the ICO:
ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
We would always appreciate the chance to address your concerns directly before you contact the ICO â please email dpo@easydsar.org first.