Subject Access Request to Black Horse

Black Horse asks you to write to it for a copy of your personal information. Its privacy notice gives one address for that, and it is the group team's rather than Black Horse's own: replies and paperwork may come back carrying Lloyds Banking Group's name rather than the one on your agreement. Black Horse publishes no online subject access form and no email address for a request, which is a difference from its group siblings — Lloyds Bank, Halifax and MBNA each have one. You do not have to be a current customer. The notice says it applies to you if you are or have been a customer of Lloyds Banking Group, and that it may apply even if you are not one — for example if you have applied for a product or raised a complaint. So a declined application and a closed complaint are both within reach of a request. Your information is held by Black Horse, which its privacy notice says is part of Lloyds Banking Group. The legal entity is Black Horse Limited, registered in England and Wales with number 661204 and authorised and regulated by the Financial Conduct Authority under registration number 313409. Black Horse Motor Finance, Black Horse Motorcycle Finance and Black Horse Caravan and Motorhome Finance are all trading styles of the same company, so they are one data controller and one request. If what you actually want to know is whether commission was paid on your agreement, there is a faster route that is not a subject access request. Black Horse publishes a motor commission information request form: it will check an agreement taken out after 6 April 2007, confirm whether there was a discretionary or a non-discretionary commission arrangement and, where available, tell you how much commission was paid to the dealer. It says it aims to complete all requests within 28 days, and it says you will need your address at the time of the agreement, the vehicle registration and your full name. It asks for no identity documents and needs no account. Black Horse says the FCA has been reviewing commission on regulated motor lending for personal vehicles taken out on or after 6 April 2007 and before 1 November 2024, including hire purchase and personal contract purchase, and that parts of the FCA's compensation scheme are currently paused because of a legal challenge. It says that if you already have a complaint with it, you do not need to do anything and it will contact you with an update. A subject access request gets you the records; it does not get you a redress decision or a payment. You do not need a claims management company. Black Horse says you can raise a commission complaint directly with it free of charge, that it will review the complaint in exactly the same way either way, and that using a professional representative will not affect the outcome or improve your chances of compensation. If you are a third party acting for a customer on a commission complaint, it asks you to email MotorCommission@blackhorse.co.uk or call 0800 022 4844 rather than use the online form. A closed agreement is usually not a deleted one, but an old one may be gone. Black Horse says it keeps personal information for as long as you have a product or are using a service and, in most situations, for up to 7 years after — longer only where it is archived for historical purposes or cannot be deleted for legal, regulatory or technical reasons. Some of what you may want does not need a request at all. Black Horse says your online account shows your agreement number and type, your APR and how long you have left to pay, and that getting a settlement amount is one of the things you can do there. Black Horse also says calls may be recorded or monitored, so call recordings are among the records a request can reach, alongside the communications it says it learns about you from letters, emails, conversations and web chat, the financial and transactional records of the agreement, and the automated decisions and profiling it describes making about pricing and about what it offers you. Ending the agreement is a different process again, not a data request. Black Horse says that because your agreement is regulated by the Consumer Credit Act 1974 you have a legal right to voluntary termination — returning the vehicle before the agreement ends, with the amount you have already paid deciding whether anything is left to pay — unless you are an LLP or a limited company. If your finance was arranged in Jersey, Guernsey or the Isle of Man, this is not your request. That business is Black Horse Offshore Limited, a separate company whose own privacy notice says your information is held by it, and which gives a different address: DSAR Team, Black Horse Offshore Limited, Customer Relations, 9 Broad Street, St Helier, Jersey JE2 3RR. Black Horse Limited's own terms say its products and services are only available to residents of the UK excluding the Channel Islands and the Isle of Man. Records of someone who has died are not a subject access request — data protection rights end at death. Black Horse asks you to call its bereavement team on 0800 302 9108, Monday to Friday 9am to 5pm. Black Horse publishes 0344 824 8888 (+44 344 824 8888 from outside the UK, 9am to 5pm, Monday to Friday) to speak to it about a data privacy rights request, but the next block on the same page says that to get a copy you write. Its general contact page says the line is for customers with additional support needs and customers who cannot use its online services. If you have a hearing or speech impairment it says you can use Relay UK by dialling 18001 before the number, and if you are Deaf and a BSL user it offers its BSL SignVideo service. The Group Data Protection Officer is published at the same Leeds address with a different addressee line, and that is not the request route.

Made under UK GDPR Article 15

Banks hold considerably more about you than statements: call recordings, branch and chat notes, complaint files, internal correspondence, fraud and affordability assessments, and the reasoning recorded behind lending decisions. Statements are usually available in online banking already, so a SAR is most useful for everything that is not.

Requests here are usually made for a reason — a complaint, a disputed transaction, an affordability argument, or a fraud marker. Being specific about dates, account numbers and the events you care about produces a far more useful response than a blanket request for everything.

Fraud markers are often not held by the bank alone. CIFAS and National Hunter are separate organisations, and a marker recorded with them needs its own request sent directly to them.

• Call recordings and contact notes
• Complaint files and internal investigation notes
• Lending and affordability decision records
• Fraud markers and the reasons recorded for them
• Account opening and closure correspondence

Deadline. An organisation must respond without undue delay and within one month. It may extend by up to two further months where the request is complex or you have made a number of requests, but it must tell you within the first month that it is doing so, and why.

Cost. There is normally no fee. A reasonable fee may only be charged where a request is manifestly unfounded or excessive, or where you ask for further copies.

Proving who you are. An organisation may ask you to verify your identity, but only where it has reasonable doubts about who you are, and it should ask for the minimum needed. Where it needs further information to deal with your request, the one-month clock pauses until you provide it.

How hard they have to look. An organisation has to carry out a reasonable and proportionate search — not an exhaustive one. What counts as reasonable depends on the volume of information, the difficulty of locating it, and the size and resources of the organisation. This is a common reason for a partial response, and it is worth being specific about what you want.

If they ignore you. Complain to the organisation first. Since 19 June 2026 every organisation has had a legal duty to give you a clear way to raise a data protection complaint, to acknowledge it within 30 days, to look into it properly and to tell you the outcome. If it does not, or the answer is incomplete, you can then complain to the Information Commissioner's Office.