How It Works - SARTastic

What is a Subject Access Request?

A Subject Access Request (SAR) is your legal right under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It lets you ask any organisation what personal data they hold about you, why they hold it, and who they have shared it with.

Organisations must respond to your request within one calendar month of receiving it. This right applies to any company, charity, or public body operating in the UK. They cannot charge you a fee for responding to a standard SAR.

Two ways to use SARTastic

SARTastic offers two distinct front-end journeys that share the same automatic send-and-track engine underneath. Pick the one that matches why you’re here — you can always come back and use the other later.

FCA Car Finance Redress

Car Finance claim

Had a car-finance agreement between 2007 and 2024? SARTastic has all 22 major UK car finance lenders pre-loaded — with their dedicated FCA-redress complaint inboxes already known. Tick the ones you’ve used (or “select top 9” / “all FCA scheme lenders”), and we generate the right legal letter for each and email them all at once.

One-click multi-lender batch — no typing 22 addresses
Letters route to each lender’s dedicated redress team, not their generic DPO
Every letter dated the same day — preserves your rights under the FCA deadline
Track all 22 response windows from a single dashboard

Start my Car Finance claim

Any company, any data

Any other SAR

Need data from a company that isn’t a car finance lender? Search our directory of 600,000+ ICO-registered UK organisations — banks, insurers, retailers, public bodies, social platforms, loyalty-card providers — and we generate the legally compliant SAR letter for the one you pick.

Live type-ahead search against the full ICO register
Letter tailored to the organisation’s published contact
One target per request (create as many separate SARs as you need)
Same 30-day deadline tracking and ICO-escalation support

Make any other SAR

The five steps (same either way)

Under the hood, both journeys drive the same engine. Here’s what happens whichever path you pick:

1

Create your free account

Sign up in under a minute. Add your name and address so we can personalise the SAR letters. Verify your email — required before any letter is dispatched in your name.

2

Pick your recipient(s)

Either tick car-finance lenders from the pre-loaded 22-strong directory, or search the ICO register for any other UK organisation. One-step pick; no typing of addresses.

3

Review your letter

We generate a legally compliant SAR letter, personalised to you and addressed to the right team at the recipient. Read it, tweak if needed, then send.

4

One-click send & receive

SARTastic emails the letter on your behalf from info@sartastic.co.uk, with the reply-to set to your own email so lender responses come straight back to your inbox. No PDFs, no copy-paste, no manual email. A download-and-post option is always available if you prefer.

5

Track and follow up

Your dashboard counts down the 30-day response deadline for every SAR. If an organisation misses the deadline, SARTastic helps you understand your options — including escalating to the Information Commissioner’s Office (ICO).

What to expect back from an organisation

Once your SAR has been received, the organisation has one calendar month to respond. They must provide:

Confirmation of whether they process your personal data
A copy of your personal data
Information about how and why your data is being processed
Details of who your data has been shared with
How long they intend to keep your data

Organisations can request additional ID verification if they have a reasonable doubt about your identity — a photo ID and proof of address are the usual asks. (You can upload these to your SARTastic profile once and have them ready for any SAR that needs them.) If an organisation fails to respond within the deadline, you have the right to complain to the ICO.