Subject Access Request - Third Party

National Car Parks Ltd (NCP) takes data protection seriously and is committed to complying with the UK General Data Protection Regulation (UK GDPR). Under UK GDPR, third parties can make a subject access request (SAR) on behalf of an individual to access the personal data that NCP holds about them

Subject Access Request

Make a Subject Access Request here

In order to process your request, we may require proof of your identity. Due to the nature of our business, we require a copy of your V5c as proof of identity. You can opt to verify your identity by uploading a copy of your ID via our webform, you are also able to send copies via post or email. Any copies you send to us will be reviewed by our Data Protection team and securely deleted after.

To make a SAR via email, please provide:

• A summary of the information you are requesting.
• Relevant specific information to support our searches, such as full name, email address, VRN’s, reference numbers, time/date, telephone number etc.
• Due to the nature of our organisation, we request a copy of your V5c as proof of your identity.

SARs can also be submitted by email to [email protected]

To make a SAR via email please provide:

• Name of the individual on whose behalf the request is being made
• A signed authorisation letter from the data subject or another form of valid authorisation that proves you have permission to request their data.
• Proof of the individual's identity
• Description of the personal data that is being requested

Please send your request to NCP at [email protected] or post to:

The Data Protection Officer
National Car Parks Limited
The Bailey
16 Old Bailey
London
EC4M 7EG

What happens after a Subject Access Request is made?

Upon receiving a SAR, NCP will verify the identity of the customer making the request and provide a copy of the personal data that is held about them usually within one month. If an exemption applies, or an extension is required due to a complex SAR we will inform you.

However, if we need to verify identity to be able to deal with the request, the time frame will be one calendar month from the date of receipt of the ID.

If an exemption applies, NCP will notify the customer in writing and explain the reasons for the exemption.

Complaints

If a third party is not satisfied with NCP's response to their SAR, they have the right to complain to the Information Commissioner's Office (ICO). The ICO is the UK's independent data protection authority.

Third parties can contact the ICO at:

Information Commissioner's Office
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Phone: 0303 123 1113
Website: www.ico.org.uk

NCP is committed to handling SARs promptly, efficiently, and in accordance with UK GDPR.