Data Protection Act

The Data Protection Act (1998) is based on eight legally enforceable principles that organisations and individuals must apply when they process your personal data. The principles underlying it are designed to keep your personal information confidential, accurate and secure.

You have a right to request a copy of all information the Company holds about you. This is called a Subject Access Request.

Personal data

Personal data is information that relates to a living individual who can be identified from that information, for example, names, addresses, membership number etc. The Act also protects 'sensitive' information you supply to the Company, including, information about your health, racial or ethnic origin and the commission or alleged commission of any offence.

How do I make a Subject Access Request?

The Data Protection Act gives you a general right of access to personal data that relates to you. Access requests must be made in writing or on a Personal Data Protection Request Form.

You must supply as much detail of the information that you are seeking as possible in order to locate the data requested along with proof that you are the data subject.

You must include:

  • as much detail of the information that you are seeking as possible to locate the data requested e.g. which department/facility holds it and any reference numbers which you have
  • proof that you are the data subject in the form of two documents which prove your identity, this could include: a passport, driving license or a utility bill which should be less than three months old. At least one of the documents must contain your signature to compare it with the one on the form
  • a payment of a £10 administration fee

You may supply the documents by presenting them in person. If making your application by post, please send photocopies.
The application, proof of identity and £10 cheque should be sent to:
Data and Support Officer
Magnum Leisure Centre
KA12 8PP

What happens next?

Your request will be acknowledged within 3 working days. We will respond to your request within 40 days.

Once we respond to your request, you will receive:

  • a copy of all, or part, of the data we hold about you and an explanation why some data cannot be provide
  • reasons why we keep your data
  • details of who we share your data with

Can I see all the information that is held about me?

Usually you will be given a copy of all the information that the Company keeps about you. However, there are times when we will withhold some information. This information can include:

  • information about another member of your family, unless explicit permission has been given by that person
  • information which has been given about you by a person who does not work for or on behalf of the Company, unless again explicit permission has been given by such an individual
  • information which may prevent the detection of a crime or prosecution of an offender, or which may affect a legal matter such as care proceedings
  • information, which it is believed would cause you or another person, serious physical, mental or emotional harm if shared or disclosed

Asking for information on someone's behalf

You can ask a third party representative to act on your behalf when making a Subject Access Request, such as, a solicitor, financial advisor, doctor, carer or family member. In this case, the Company must be satisfied that you have consented to this arrangement so we will ask your representative to demonstrate this.

Parental and guardian rights

In cases where data subjects are incapable of understanding or exercising their rights, for instance because they are too young, then Subject Access Requests may be made by parents or other persons who are legally able to act on behalf of the data subjects.

What if I want to change or amend information that is held about me?

If you believe that the information we hold about you in our records is incorrect you can request that it is removed or corrected. We will consider your request and may ask for further details or evidence to support it. If we are satisfied that the information we have is inaccurate we will make sure that it is either erased or amended.

The Company’s Data Protection Responsibilities

The Data Protection Act regulates how organisations like the Company collect, process and store and if appropriate, disclose personal information held electronically and in paper files.
The Data Protection Register records how we do this. More information is available on the Information Commissioner's Office.

Data Protection Registration

The Company’s Data Protection Registration number is Z460478X, this expires on March 2018.

Share this information

Submit to DiggSubmit to FacebookSubmit to Google BookmarksSubmit to StumbleuponSubmit to TwitterSubmit to LinkedIn


KA Leisure has updated its cookie policy. We use cookies to ensure that we give you the best experience on our website. If you continue without changing your settings, we'll assume that you are happy to receive all cookies on the KA Leisure. However, you can change your cookie settings at any time by visiting our privacy policy. To find out more about the cookies we use and how to delete them, see our privacy policy.

  I accept cookies from this site.
EU Cookie Directive Module Information