If a Subject Access Request (SAR) is received from a source where the individual’s identity has already been verified, then Brandelity Limited will comply with that request within thirty (30) days of receipt and completely free of charge. Where an individual’s identity needs to be verified, or where permission for a third-party making a request on behalf of another needs to be sought, or where it is not clear what the individual is seeking from their initial correspondence, Brandelity Limited’s response correspondence will be sent without undue delay to request proof of identity/permission before progressing the request. We may request additional information from you to help confirm your identity and your right to access, and to provide you with the personal data we hold about you. We reserve the right to refuse to act on your request if we are unable to identify you. Where appropriate, Brandelity Limited will respond to an individual upon receipt of their SAR, regardless of a need for further information in order to process the SAR, in order to confirm receipt and outline timeframes. Certain SARs might not enter the process for a detailed response. Such requests will fall into one or more of the categories below and reasons will be communicated to the individual submitting the SAR. The categories are:

• The request requires excessive effort. Due to Brandelity Limited’s small size and limited impact on individuals, requests that are likely to require more than sixty (60) minutes of the Data Protection Lead’s time to process (not including correspondence) will be deemed ‘excessive’;
• The request is unfounded. A SAR will be unfounded if a response confirming that no Personal Data is held or that the individual’s Personal Data has been erased or anonymised has been sent within the last ninety (90) days;
• The request is a duplicate/repetitive. The same, or materially similar SARs have been submitted by the same individual in the last ninety (90) days.

Brandelity Limited may charge a reasonable administration fee for excessive or repetitive requests. This will be communicated in initial correspondence (with the payment options) and a SAR subject to a fee will only be progressed once payment has been received. For more information on your rights under the GDPR, see please email dataprotection@usb-flashdrive.com Click here to download the form.