GetMySAR

GetMySAR

Terms of Service

These Terms of Service explain the rules for using getmysar.com and our paid administrative service for preparing and submitting Subject Access Requests under UK GDPR.

Last updated: 19 March 2026

1. Acceptance of these Terms

These Terms of Service govern your use of the GetMySAR website and services available through https://getmysar.com.

By using our website, submitting information through our form, or paying for our service, you agree to be bound by these Terms. If you do not agree, you should not use GetMySAR.

2. Who we are

In these Terms, "GetMySAR", "we", "us" and "our" refer to GetMySAR.

Questions about these Terms can be sent through our contact form.

3. Our service

GetMySAR is a one-off paid administrative service that helps users prepare and submit a Subject Access Request ("SAR") to a named organisation under UK GDPR and the Data Protection Act 2018.

Your payment is for our service, which may include:

  • collecting the information you provide through our online form;
  • preparing and formatting the SAR for submission;
  • generating and sending supporting documents you provide or sign, including consent forms and ID documents where applicable;
  • sending the SAR to the organisation you identify using the contact details and submission route available to us; and
  • providing limited administrative support and general guidance on possible next steps, such as raising concerns with the ICO or seeking independent legal advice.

Unless we expressly say otherwise, our service does not include legal representation, court action, filing an ICO complaint on your behalf, or guaranteed ongoing case management.

5. Eligibility and authority to submit

You may only use GetMySAR to submit a request:

  • for yourself; or
  • for another person where you are properly authorised to act on their behalf.

If the request relates to a child, it must be submitted by a parent, guardian, or another person with appropriate authority to act for that child.

We may ask for evidence of authority where a request is submitted on behalf of another person. If adequate authority is not provided, we may refuse, delay or cancel the submission.

6. Your responsibilities

When using GetMySAR, you are responsible for:

  • ensuring the information you provide is accurate and complete;
  • ensuring you have authority to act for another person where applicable;
  • checking that the target organisation and its contact details are correct so far as you know;
  • deciding whether to upload ID documents or other supporting materials;
  • ensuring any documents you upload are lawful to share and not misleading or false; and
  • reviewing your submission before payment and confirming that it reflects your instructions.

We are entitled to rely on the information and instructions you provide to us.

7. Submission process and review

Once you complete the form and payment is successfully made, your SAR will usually be prepared and submitted promptly.

However, some requests may be held for review before submission. This may happen where, for example:

  • the organisation appears to require its own internal form or portal;
  • the contact details provided appear unusable or unreliable;
  • the request appears incomplete, false, abusive or unlawful;
  • your authority to act is unclear or unsupported; or
  • payment has failed or been flagged for verification.

We may refuse, delay, hold, or cancel a submission where reasonably necessary for legal compliance, security, fraud prevention, technical reasons, or service limitations.

8. Fees and payment

GetMySAR is a paid service. The fee shown at checkout is the fee for our preparation and submission service.

Payment does not buy the underlying legal right of access. In most cases, a Subject Access Request under UK GDPR can be made without a fee directly to an organisation. Our charge is for the convenience and administration of using GetMySAR.

We use third-party payment providers to process payment. Your submission may not proceed unless payment has been successfully completed.

9. Refunds

Refunds are not generally available once we have begun processing or submitted your request, except where required by law or where we agree otherwise.

If, after reviewing your submission, we determine that the request is not suitable for submission through GetMySAR, we may cancel the order and issue a refund. This may include situations where:

  • the target organisation only accepts Subject Access Requests through its own online form, portal or internal process;
  • the available contact route is not suitable for us to submit the request;
  • the submission cannot reasonably be completed using our service; or
  • there is another operational or legal reason we cannot process it.

In those cases, we may tell you where or how the request should be submitted directly.

10. No guarantee of outcome

Payment for our service does not guarantee:

  • a response from the organisation;
  • a successful outcome;
  • disclosure of all information requested;
  • that the organisation will accept the request without asking for more information;
  • that the organisation will comply with UK GDPR; or
  • completion within any specific timeframe.

Organisations are generally expected to respond within one calendar month, but they may seek additional information, extend time where permitted by law, or dispute the request. We do not control their actions and are not responsible for their compliance.

11. Data controller fees, ID checks and follow-up requirements

The target organisation may ask for proof of identity, proof of authority, clarification of the request, or further supporting information before it will process the SAR.

It is your responsibility to cooperate with any lawful verification or clarification process required by the organisation.

In limited circumstances, an organisation may charge a fee under Article 12(5) UK GDPR, for example if it considers a request manifestly unfounded or excessive. Any such fee charged by the organisation is your responsibility, not ours.

If you choose to upload ID or supporting documents through GetMySAR, you do so on your own instructions and are responsible for deciding what documents to provide.

12. Uploaded content and restrictions

You must not upload, submit or send through GetMySAR:

  • unlawful, abusive or defamatory material;
  • malicious code, viruses or harmful files;
  • personal data or confidential information belonging to someone else where you are not authorised to share it;
  • knowingly false, forged or misleading documents; or
  • material intended to harass, threaten or unlawfully pressure an organisation or individual.

We may remove, reject or refuse to process content that appears to breach these Terms or applicable law.

13. Permission to use submitted content

You retain ownership of the information and documents you submit.

However, by using GetMySAR, you give us permission to use, store, process, copy and send the content you provide solely for the purpose of operating the service, including:

  • preparing your Subject Access Request;
  • generating supporting documents;
  • submitting the request to the target organisation;
  • keeping administrative records; and
  • handling follow-up communications relating to the submission.

14. Email communications and contact details

GetMySAR does not currently provide a user account system. All communications and updates about your submission are handled by email.

You are responsible for:

  • providing a valid and accessible email address;
  • completing any email verification or initial email check we require;
  • monitoring your inbox and spam/junk folders; and
  • responding promptly if we ask for clarification or documents.

We are not responsible for issues caused by inaccurate contact details or your failure to monitor email communications.

15. Intellectual property

The GetMySAR website, branding, design, software, page content, layout, graphics and underlying materials are owned by or licensed to GetMySAR and are protected by intellectual property laws.

You must not, without our written permission:

  • copy, reproduce or republish substantial parts of the website;
  • scrape or systematically extract data from the site;
  • reverse engineer or interfere with the operation of the service; or
  • reuse the site or its content for commercial purposes.

16. Suspension, refusal and cancellation

We may suspend, restrict, refuse or cancel access to the website or service at any time where reasonably necessary, including for:

  • security or technical reasons;
  • suspected misuse, fraud or abuse;
  • suspected unlawful activity;
  • non-payment or payment reversal;
  • lack of authority to act for another person; or
  • compliance with law, regulation or lawful requests.

Where appropriate, we may notify you and explain the reason, but we are not obliged to do so where this would be unlawful or would undermine security or fraud prevention.

17. Liability and disclaimers

The GetMySAR website and service are provided on an "as is" and "as available" basis.

To the fullest extent permitted by law, we do not guarantee that the service will be uninterrupted, error-free, always available, or suitable for every organisation or every type of request.

We are not responsible for:

  • any failure by the target organisation to respond or comply;
  • delays caused by the organisation, third parties, internet failures, hosting providers, payment providers or email delivery services;
  • loss caused by inaccurate information supplied by you; or
  • indirect, incidental, special or consequential loss, including loss of opportunity, distress, goodwill, data or profits.

To the fullest extent permitted by law, our total liability to you arising out of or in connection with the service shall be limited to the amount you paid to us for the relevant submission.

Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law, including liability for fraud or fraudulent misrepresentation, or for death or personal injury caused by negligence.

18. Privacy and data protection

Our handling of personal data is described in our Privacy Policy.

By using GetMySAR, you acknowledge that we will process personal data provided through the service in order to prepare, send and administer your request.

You can read our Privacy Policy here: Privacy Policy.

19. Changes to these Terms

We may update these Terms from time to time. Any updated version will be posted on this page and will take effect from the date shown under "Last updated".

Your continued use of the website or service after changes are posted will be treated as acceptance of the updated Terms.

20. Governing law and jurisdiction

These Terms and any dispute or claim arising out of or in connection with them, their subject matter, or the use of GetMySAR shall be governed by the laws of England and Wales.

The courts of England and Wales shall have jurisdiction, except where applicable consumer law allows you to bring a claim in another part of the United Kingdom where you live.

21. Contact

If you have any questions about these Terms, please use our contact form.