Information Access Request Policy
This policy is intended to cover requests from external sources either for information about the Nisa organisation and its activities, or personal data held by Nisa.
This policy is intended to cover requests for information from external sources about the Nisa organisation and its activities. External sources include but are not limited to the general public, all types of media organisations, and learning institutions. This policy is not intended to cover information requests which departments within the Nisa organisation give as part of normal day to day business activities such as dealings with suppliers, members (including forum), and government organisations.
Sources of Requests
There are a number of ways a request for information may be received:
- Social Media e.g. Facebook, Twitter, Instagram, LinkedIn
- Company website
- By email
- By post
- Face to face conversations
- Requests received to a specified team’s email address will be responded to directly; requests received through any other source will be forwarded to the relevant team
Procedure for Dealing with Information Requests
Request received by an employee. The employee must state that a form is required, and the timescales involved. These will be clearly stated on the external website and can be up to one calendar month from receipt of the request. It may be easier to refer the person requesting the information to the external website available for making such requests.
Standard Request Form filled in by the employee outlining (if not using the external website)
a. Who requested the information?
b. Contact details
c. What information is required?
d. Why the information is required?
e. When is the information required?
Procedure for Dealing with Data Subject Access Requests
Data protection laws provide you with a number of rights regarding your personal data (e.g. your name, address, correspondence) as set out below:
Right to access your personal data
You may request confirmation that we hold personal data about you, as well as access to a copy of any such data.
Right to rectification
You may ask us to rectify any inaccurate information we hold about you.
Right to erasure
You may ask us to delete your personal information.
Right to restriction
You may ask us to restrict the processing of your personal information in certain circumstances.
Right to portability
You may request the receipt or transfer to another organisation in a structured, commonly-used and machine-readable form, the personal data that you have provided to us.
Right to object
You may object to our processing of your personal information in certain circumstances.
Right to withdraw consent
Where our processing of your personal information is based on your consent, you may withdraw this consent at any time, although this won’t affect the lawfulness of any prior processing where we relied on your consent.
Right to make a complaint
You may make a complaint about our processing of your personal data by contacting us via the contact details provided on this page. While we hope that we would be able to address any issues you have in respect of this processing, you may also make a complaint to the UK’s data protection regulation - visit the Information Commissioner’s Office.
Applicable law (the Data Protection Act - 2018) may allow or require us to refuse to provide you with access to some or all the personal data that we hold about you, or we may have destroyed, erased, or made your personal data anonymous in accordance with our record-retention obligations and practices. If we cannot provide you with access to your personal data, we will inform you of the reasons why, subject to any legal or regulatory restrictions.
To make a request, please contact us by email at Data Protection, or by post addressed to Data Protection Manager, Nisa Retail Limited, Waldo Way, Normanby Enterprise Park, Scunthorpe, North Lincolnshire, DN15 9GE.
Include your name, contact details (if requesting by post), relationship to Nisa (customer, partner, previous employee, etc), and a brief description of the information that you wish to access. We will reply to you with a form to retrieve the detail needed to fulfil the request. We will also need to verify your identity before releasing the information. We will respond to your request within one month of receipt of a fully completed form and proof of identity.