Shufti · Data Protection Office

Data Subject Rights Request Form

Exercise your rights under the UK GDPR (and, where applicable, the EU GDPR). Shufti will assess your request, route it to the appropriate team, and ensure compliance with all applicable statutory obligations — you do not need to determine which party to contact.

Form Rights Request · v4.0 Email [email protected]

Form sections

1.Your Details
2.Nature of Interaction
3.Right(s) to Exercise
4.Response Timelines
5.Processing Details
6.Identity Verification
7.Declaration & Submit

This form enables you to exercise your rights under the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU GDPR. Please complete all relevant sections as fully as possible. Shufti will assess your request, route it to the appropriate team, and ensure compliance with all applicable statutory obligations.

1.Your Details

Full Legal Name * Please enter your full legal name.

Email Address * Please enter a valid email address.

Phone Number (optional) Helpful if we need to contact you.

Associated Reference / Transaction ID If known (e.g. verification reference).

2.Nature of Your Interaction with Shufti

Please select the context(s) in which Shufti may hold your personal data. This helps us locate the correct data and route your request. If you are unsure, please select the most likely option and provide details in Section 5.

Identity Verification for a Third-Party OrganisationMy identity was verified by Shufti on behalf of another organisation (e.g. a bank, fintech, or employer). You do not need to contact the third-party first. Website or Marketing InteractionI visited Shufti's website, submitted an enquiry, received marketing communications, or interacted with cookies/analytics. Employment or RecruitmentI am or was a Shufti employee, intern, contractor, or job applicant. Fraud Prevention / Blocklist / Fast IDMy data may be held on a blocklist or fraud prevention dataset, or I have previously enrolled in Fast ID (consent-based re-verification). Service Improvement / AI Model Training DataMy data may have been used by Shufti for internal service improvement or algorithm training purposes. Other / UnsurePlease describe in Section 5 below.

Please select at least one option.

3.Right(s) You Wish to Exercise

Please select one or more rights below. You may select multiple.

Right of Access (Subject Access Request — SAR)A copy of the personal data Shufti holds about you, information about how it is used, who it is shared with, and how long it is kept. Right to Erasure ('Right to be Forgotten')Deletion of personal data where there is no longer a lawful basis for retaining it (subject to exceptions e.g. legal compliance). Right to RectificationCorrect personal data that is inaccurate or incomplete. Please specify the correct information in Section 5. Right to Withdraw ConsentWhere processing is based on consent (e.g. Fast ID enrolment, service improvement). Does not affect prior lawful processing. Right to Object to Automated Decision-MakingRequest human review of an automated decision with legal or similarly significant effects. Right to Object to ProcessingObject where Shufti relies on legitimate interests (e.g. service improvement / model training). Right to Restriction of ProcessingPause processing in certain circumstances (e.g. during a rectification assessment). Right to Data PortabilityReceive your data in a structured, commonly used and machine-readable format, where technically feasible.

Please select at least one right.

4.Response Timelines

Shufti will acknowledge receipt and issue a tracking reference within 5 working days of submission, and respond substantively to your request within one calendar month of receiving a valid, complete request. Where a request is complex, the response period may be extended by a further two months (three months total). If an extension is required, you will be notified within one month of your original submission with an explanation. If we are unable to comply (in whole or in part), we will explain the reason and inform you of your right to complain to a supervisory authority.

5.Details of Processing (for Traceability)

Please provide as much detail as possible to help us locate the correct data.

Approximate date(s) of interaction

Service or product used (if known)

Organisation that requested your verification (if applicable)

Country where interaction took place

Device or platform used

Additional details or context

6.Identity Verification

Shufti is required to verify your identity before processing your request. This is to protect your personal data and prevent unauthorised disclosure.

What we may ask for: Confirmation of your name and email address registered with Shufti or the relevant client; your verification reference or transaction ID (if available). For higher-risk requests, additional verification proportionate to the sensitivity of the data — we will tell you what is required at the time. You may redact sensitive details (such as document numbers or photographs) from any documents you choose to provide. We will not require government-issued ID as a blanket requirement.

Email address used during original interaction If different from the email above.

Verification reference (if known)

Additional verification information (if you choose to provide)

7.Declaration & Submit

By submitting this form, I confirm that:

The information provided in this form is accurate to the best of my knowledge;
I am the data subject named above, or I am authorised to act on their behalf (in which case I will attach evidence of authorisation by email);
I understand that Shufti will contact me if further information is needed to verify my identity or process my request.

Signature (type your full name) * Please type your full name to sign.

Date * Please enter today's date.

I confirm the declarations above and agree that Shufti will process the information in this form to handle my data subject rights request. Please confirm the declaration to continue.

Protected by reCAPTCHA · submit will enable once the security check loads.

Version 4.0 · Last updated: April 2026 · Shufti Pro Limited · Data Protection Office · For further information see our Privacy Notices (A and B).