0118 338 8050 hello@clickpop.co.uk

Data Subject Request (DSR) Policy

Last updated: 5th January 2026

1. Purpose

This policy sets out how Clickpop Marketing Ltd handles requests from individuals to exercise their rights under UK data protection law, including the UK GDPR.

We are committed to responding to all valid Data Subject Requests (DSRs) in a lawful, transparent, and timely manner.

2. Scope

This policy applies to requests relating to personal data processed by Clickpop Marketing Ltd in connection with its services, including professional contact data processed in a B2B context.

3. Types of requests we handle

Individuals may exercise the following rights, where applicable:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to object (including to processing based on legitimate interests)
  • Right to data portability (where applicable)

Requests may be submitted by the data subject or an authorised representative.

4. How to submit a request

Data Subject Requests can be submitted by contacting:

Email: hello@clickpop.co.uk
Subject line: “Data Subject Request”

Requests should include sufficient information to allow us to verify the requester’s identity.

5. Identity verification

To protect personal data, we may request reasonable information to verify the identity of the individual making the request before responding.

Where verification is not possible, we may decline the request in accordance with UK GDPR requirements.

6. Response times

  • We aim to respond to all valid requests within one month of receipt.
  • Where a request is complex or numerous, this period may be extended by up to two additional months, in line with UK GDPR.
  • If an extension is required, we will inform the requester and explain why.

7. How requests are handled

Requests are assessed to determine:

  • Whether the requester is entitled to exercise the right claimed
  • Whether any exemptions or limitations apply
  • Whether the request relates to personal data we control or process

Where appropriate, we will:

  • Provide access to personal data
  • Correct inaccurate data
  • Delete or restrict processing
  • Honour objections to processing based on legitimate interests

8. Limitations and exemptions

In certain circumstances, we may lawfully refuse or limit a request, including where:

  • The request is manifestly unfounded or excessive
  • We are required to retain data for legal or regulatory reasons
  • Disclosure would adversely affect the rights of others
  • Data is processed solely in an aggregated or anonymised form

Any refusal will be explained clearly to the requester.

9. Charges

Data Subject Requests are handled free of charge, unless a request is manifestly unfounded or excessive, in which case a reasonable fee may be charged as permitted by law.

10. Record keeping

We maintain internal records of Data Subject Requests received and how they were handled, in accordance with our accountability obligations.

11. Complaints

If an individual is dissatisfied with our response, they may raise a concern with us directly or lodge a complaint with the UK Information Commissioner’s Office (ICO).

12. Responsibility

Responsibility for handling Data Subject Requests sits with company leadership, who ensure requests are managed in accordance with this policy and applicable law.