Understanding Your Data Rights
- Last updated
- Save as PDF
The UK General Data Protection Regulation (UK GDPR) alongside the UK Data Protection Act 2018 provides a number of information rights. Our short guide explains everything that you need to know.
We're committed to keeping your information safe and private
In our privacy policy, we explain how Data Protection legislation applies to you and your relationship with TalkTalk. It reflects our open and honest approach to collecting and using your personal information.
In summary, it covers what information we collect, how we collect it, how we use the information, who we’ll share it with and what your rights are.
Personal data is information that identifies you and is about you. From your name and address to account numbers, bank details and IP addresses. Any information that can identify you as an individual can be classed as personal data.
Personal data is used by us for a number of reasons such as setting up your service, managing payments, dealing with enquires, and a range of other activities in order to manage our relationship. You can find out more information within our Privacy Policy
We need to process your information for a number of reasons and we only collect and use information to efficiently deliver the products and services that you receive from us. Here are just a few of the reasons why we need your data:
- Verify your identity when you use our services or contact us
- Analyse our services with the aim of improving them
- Monitor network traffic from time to time for the purposes of backup and problem solving, for example our automated system may monitor email subjects to help with spam and malware detection
- To tell you about changes to our websites, services or terms and conditions
As you maybe aware, privacy legislation has a number of reasons we can collect and process your information. We don’t always need your consent to process your information; we can use it without consent if we have a valid reason. These reasons are known as a lawful basis and there are six lawful processing purposes we can rely on:
- If you have provided us with your consent to process your personal data
- To perform or enter into a contract with you
- To comply with a number of legal obligations our business is subject to
- Vital interests where processing is necessary to protect someone’s life
- Performing a task in the public interest or for its official functions.
- To fulfil our legitimate interests with you
You can find more information about this in our Privacy Policy.
We may need to transfer your information to our trusted and approved partners/suppliers so that we can provide, deliver, and continue to maintain the relationship we have with you. We have ensured that all the necessary safeguards are in place to protect your information.
Where we share your information with third parties, they are required to follow our instructions in respect of the use of your information and they must comply with all applicable UK Data Protection laws to protect your information and keep it secure.
We may from time to time need to contact you with information about the relationship we have with you. These are service based messages.
We know over the duration of a contract, your needs, uses and circumstances can change, and you may benefit from moving to different services, products, or tariffs. As such, we would like to also contact you with details of those available to you, special promotional offers such as TV boost offers or products like our latest Wi-Fi Hub that we think you may be interested in.
You can opt into receiving these messages along with the communication channels you prefer us to use, such as for example, email, telephone, SMS, Whatsapp, or post.
If you would like us to keep you updated on products, services, and offers which may enhance your user experience, you can let us know and update you marketing preferences at any time via My Account or by contacting us via phone, online chat, email or by post.
Your Rights
Data Protection legislation provides you with a number of Information Rights. You may exercise these rights free of charge and we'll fulfil your request within one month. After receiving your request, we may need to contact you to verify your identity and/or confirm the details of your request. This is to ensure the security of the information we will provide you with and/or help us to fully fulfil your request.
You can request a copy of the information we hold on you (such as personal data, call information, account notes, contracts & copies of correspondence) by completing a subject access request. It’s free-of-charge to request your information. However, in certain circumstances the legislation allows us to request a payment or refuse the request. In these circumstances, we will contact you. If you would like to make a request you can contact us
Data Protection Office
TalkTalk (Compliance)
PO Box 673
Salford
M5 0NH
In order to progress your request as quickly as possible, please ensure you include enough information for us to identify your account (or reason for contacting us), and the information you are requesting. To protect your information, we will also need to verify you are authorised to access this information.
Your request will be processed within one month upon receipt of all of the above. For more complex requests we may extend our handling time for a further two months. If we need to do this, we will let you know. Once processed we will securely send your information to you, along with a separate password to enable you to access your information.
FAQs
How will I receive my SAR?
Your information will be provided via TalkTalk’s Information Request Portal. This is a secure portal, and we will send you a unique link to your email, to access your information via the portal. Instructions on how to use the portal can be found in our guide .
TalkTalk can provide your SAR in alternative formats such as encrypted USB or paper. When submitting your request you will be asked in which format you require your information and whether you have any accessibility requirements.
Can someone request data on my behalf?
Yes, but only if you’ve previously added them as a nominated user or power of attorney on your account. We may also choose to contact you to validate the third-party request. Unless you confirm otherwise, we will send your information to the address on your account. For more information about these services checkout About Power of attorney and Nominated Users.
Where can I find the supplementary information that accompanies my SAR under Article 15?
We will provide a factsheet with your request to provide this information.
How long will I have to wait for my SAR?
We’ll usually send your SAR information to you within one month from receiving your validated request. However, certain requests may take a little longer, especially if we need to validate your identity or seek clarification about the information being requested.Sometimes we may need a little longer (the legislation allows us to extend up to a maximum of three months) we’ll let you know the timeframe within one month of receiving your request if this applies to you.
Will I be charged for requesting a SAR?
In most cases, we won’t charge a fee for a SAR. The legislation allows us to charge in certain circumstances, if this is the case we will contact you.
Can we refuse to administer a SAR?
The legislation provides a number of exemptions. Where an exemption applies to your particular request, we may refuse to provide all or some of the requested information. We can also refuse to comply with a SAR if it is manifestly unfounded or manifestly excessive.
If we do not process your request, we will provide you with an explanation. If you would like to discuss our decision you can contact our Group Data Protection Officer, via GDPRPrivacy@talktalkplc.com.
What if my request involves information about other individuals?
We’ll consider whether it’s possible to comply with the request without disclosing information that identifies another individual. We will consider whether it is possible to redact (blank out) the third party’s information in order to provide your SAR. If this isn’t possible, we may seek the consent, where possible of any third parties. We will respond to you whether or not we are able to disclose information about a third party.
What proof of identity is acceptable?
In certain circumstances it may be necessary for us to verify your identity in order to keep your data secure. To do this, we may contact you or you may prefer to send in a copy of your ID with your SAR. Please only send in copies of ID as they are securely destroyed as soon as the SAR is fulfilled.
If you are requesting your information to be sent to an address that we do not hold, we will contact you to verify the request and confirm the address you would like your SAR sent to.
Why have the calls that I requestednot been provided?
We do not record all calls. Where calls are recorded, we only retain them for approximately 12 months. We are unable to provide call information where customer identification and verification has not been passed on the call. Please also note we may provide a call summary rather than a call recording.
Who should I contact as I haven't received my SAR within timescale permitted?
If you haven’t received your SAR within the timeframe we provided you, please contact us
My SAR has been refused. What should I do?
If your SAR has been refused and you would like to discuss this, please contact us at: GDPRPrivacy@talktalkplc.com
I haven't received my SAR password, what do I do?
If you’re unable to access your SAR, please contact us
Types of information that can't be provided
Please be advised we are unable to provide any call records relating to ‘Free to caller numbers’ such as numbers being used for confidential helplines such as Childline, along with various others or in this case 0800 numbers. This is an industry wide OFCOM requirement as well as ensuring we meet our obligations under Article 38 of the Electronic Communications Act 2003.
We are required to ensure that any of the numbers that are designated ‘free to callers’ are not identified in your itemised bills or any other records we might make available to you.
Not having those types of calls listed on itemised bills is a legal requirement that we have to comply with.
TalkTalk are unable to provide historic VAT invoices. If this is something that you require please contact our customer service team who can arrange and update our records for you. There is no additional charge for a VAT invoice. However, you will still be subject to paper bill charges.
In certain circumstances, you have the right to have your personal data erased. This right is not absolute and only applies in certain circumstances, we may retain your data for a period of time after you have ceased your service with us. You can submit your request in a way that suits you
DataProtection Office
TalkTalk (Compliance)
PO Box 673
Salford
M5 0NH
Remember to include enough information for us to identify your account and ensure we can verify you are authorised to submit the request.
Can someone request data on my behalf?
Yes, but only if you’ve previously added them as a nominated user or power of attorney on your account. We may also choose to contact you to validate the third-party request. For more information about these services check out About Power of attorney and Nominated Users.
Privacy legislation allows you to obtain and reuse your personal data for your own purposes. It allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability.
Within the telecommunications industry, we already help customers to move or port your telephone number and service to different suppliers if you choose to leave us. Beyond this, there is no agreed or standard format for personal data files to be shared across internet service providers.
The following information will be included in a csv file which is generated when you download your data file:
- Name
- Title (Mr/Miss/Doctor)
- Installation address (current active)
- Correspondence address (current active)
- CLI (Landline - Current active)
- CLI (Mobile - Current active)
- Contact Number: Mobile
- Email address
You can download your data file via My Account. Remember you may wish to only download your data file on your own computer rather than a shared computer where someone else could see your personal information.
For technological and security reasons, we do not currently accept these files from other providers.
You have an absolute right to stop your personal data from being used for direct marketing. You can update your marketing preferences at any time in My Account or by contacting us
Data Protection Office
TalkTalk (Compliance)
PO Box 673
Salford
M5 0NH
You can also object if the processing is for our legitimate interests (or those of a third party). For more information see Legitimate Interest Groups to see where we use legitimate interests. You should give specific reasons why you are objecting to the processing of your data based on your particular situation.
In these circumstances, this is not an absolute right, and we can continue processing if we can demonstrate compelling legitimate grounds for the processing, which override your interests, e.g. we need it for the exercise or defence of legal claims.
You can register your objection by contacting us. When registering your objection please be aware that, depending on the processing you're objecting to, this may impact the relevance of any communications we can send to you e.g.:
- Product and service recommendations are likely to be less relevant as these are typically based on how you’ve used our services
- Offers are typically based on your behaviour and therefore may be less relevant if we cannot process all the information we hold
- We will not be able to use feedback from you to improve the service we provide to you and other customers
- We will not be able to use your information in determining how effective our communications are
You have the right to have your personal data rectified if it is incomplete or incorrect. Updating customer details and records is an everyday part of our business processes at TalkTalk.
If your personal data changes or you identify an error in any personal data we hold, speak to our customer service teams or you may be able to update your records in My Account. In some instances, we may require additional evidence to prove your identity before applying changes. We will let you know if this is the case.
We recognise that during the length of your contract your service uses may change and you may benefit from being on different products during this time. If you would like us to update you on products and services which may be relevant to you, please opt in to receiving these communications. You can update your preferences at any time please see the next section on how to do this.
How to change your marketing preferences
You will be able to update your marketing preferences at any time through a variety of methods:
- Accessing My Account
- By clicking on the link at the bottom of every marketing email you receive from us
- Make a request via
You can also choose how we contact you, for example by email, telephone or SMS.
You have the right to object to us processing your personal data in certain circumstances, e.g. if we're processing it for legitimate interests, or for direct marketing, including profiling.
When you do register an objection, please be aware that this may impact what we can do with your personal data e.g.:
- Any product and service recommendations are likely to be less relevant as these are typically based on how you’ve used our services, and your usage needs may change over the duration of your contract.
- Offers are typically based on your behaviour and therefore may be less relevant if we cannot process all the personal data we hold.
- We will not be able to use feedback from you to improve the service we provide to you and other customers.
- We will not be able to use your personal data in determining how effective our communications are
Additionally, you have the right to request that we restrict the processing of your personal data. e.g. if your personal information is not accurate.
How to request
To register your objection, simply request this when speaking to an advisor or in My Account.
You can also make a request via the following details:
- With our live chat team
- Call us 0345 172 0088
- Email us concerns@talktalkplc.com
- Or you can write to us if you prefer.
Please send any questions you have about our Privacy Policy to the below address:
Data Protection Officer
TalkTalk
Soapworks
Colgate Lane
Salford
M5 3TT
For any queries about your Information Rights, including Subject Access Request, please write to us at the below address:
Data Protection Office
TalkTalk (Compliance)
PO Box 673
Salford
M5 0NH
View your bills in the TalkTalk PLUS app. If you want to keep a copy of your bills, it's really easy to download them as a PDF for your records.
You can request a copy of the information we hold on you ( such as personal data, call recordings, notes, contracts & copies of correspondence) by completing a subject access request. It’s free-of-charge to request your information. However, if your request is deemed excessive, we may request you to make a payment or refuse to respond.
You can request your information in the TalkTalk PLUS app. To do this:
- Select the More tab in the TalkTalk PLUS app.
- Under Manage your data, select Data Privacy
- Select Subject Access Request (SAR)
- Under Your information, select the button next to any options you'd like the information for
- Under Select timeframe, either select All time for all information we hold on you, or use the calendar to select a date range for the information you'd like access to
- Under Format, select how you would like to receive the information (As a paper copy, on a USB drive, or on a CD)
- Select Submit request to send your request through
Your request will be processed within one month upon receipt of all of the above. For more complex requests we may extend our handling time for a further two months. If we need to do this we will let you know. Once processed we’ll send your information back to you. If you've requested a physical copy, it will be burned onto a password protected disk or encrypted USB stick. Please note that your password will be sent separately. If you've requested a paper copy, we will send this as a PDF document to the email address attached to your account.
Can someone request data on my behalf?
Unfortunately, we cannot process a Subject Access Request in the TalkTalk PLUS app on behalf of another party. We are working on bringing this feature to the TalkTalk PLUS app in a future update
In certain circumstances, you have the right to have your personal data erased. This right is not absolute and only applies in certain circumstances. You can submit your request in the TalkTalk PLUS app. To do this:
- Select the More tab in the TalkTalk PLUS app
- Under Manage your data, select Data Privacy
- Select Right to be forgotten
Remember to include enough information for us to identify your account and ensure we can verify you are authorised to access this information.
Can someone request data on my behalf?
Unfortunately, we cannot process a Right to be forgotten request in the TalkTalk PLUS app on behalf of another party. We are working on bringing this feature to the TalkTalk PLUS app in a future update.
Under the new privacy laws, you may ask us to port your personal data to you, which you could then use to move your service to another provider.
Within the telecommunications industry, we already help customers to move or port their telephone and mobile numbers to different providers. Beyond this, there is no agreed or standard format for personal data files to be shared across internet service providers. At the moment, it’s therefore unlikely that you’ll be able to use this file with another provider.
For technological and security reasons, we do not currently accept these files from other providers.
The following information will be included in a csv file which is generated when you download your data file:
- Name
- Title (Mr/Miss/Doctor)
- Installation address (current active)
- Correspondence address (current active)
- CLI(Landline - Current active)
- CLI(Mobile - Current active)
- Contact Number: Mobile
- Email address
You can download your data file through the TalkTalk PLUS app To do this:
- Select the More tab in the TalkTalk PLUS app
- Under Manage your data, select Data Privacy
- Select Data portability
- Select Download data information to download a file with your details on it.
Remember to only download your data file on your own device rather than a shared device where someone else could access your personal information.
You have an absolute right to stop your personal data being used for direct marketing. You can also object if the processing is for our legitimate interests (or those of a third party). You can update your marketing preferences at any time in the TalkTalk PLUS app. To do this:
- Select the More tab in the TalkTalk PLUS app
- Under Manage your data, select Data Privacy
- Select Right to object/restrict
- Select any settings you wish to object to, then select Submit to save your changes
In these circumstances, this is not an absolute right, and we can continue processing if we can demonstrate compelling legitimate grounds for the processing, which override your interests, e.g. we need it for the exercise or defence of legal claims.
You can register your objection by contacting us. When registering your objection please be aware that, depending on the processing you're objecting to, this may impact the relevance of any communications we can send to you e.g.:
- Product and service recommendations are likely to be less relevant as these are typically based on how you’ve used our services.
- Offers are typically based on your behaviour and therefore may be less relevant if we cannot process all the information we hold.
- We will not be able to use feedback from you to improve the service we provide to you and other customers.
- We will not be able to use your information in determining how effective our communications are
You have the right to have your personal data rectified if it is incomplete or incorrect. Updating customer details and records is an everyday part of our business processes at TalkTalk. If your personal data changes or you identify an error in any personal data we hold, you can update your records in the TalkTalk PLUS app. To do this:
- Select the More tab in the TalkTalk PLUS app
- Under Manage your data, select Data Privacy
- Select Right to rectification
- Amend the details in the app, then select Submit to finalise your changes
In some instances, we may require additional evidence to prove your identity before applying changes. We will let you know if this is the case.
In order to meet our obligations under privacy laws, we need consent to market to individuals. We won’t be able to contact individuals directly about any new products we launch, or promotions and offers that are relevant to them, if we do not have such consent. You can also choose how we contact you, for example by email, telephone or SMS.
How to change your consent choices
You will be able to update your consents at any time through the TalkTalk PLUS app. To do this:
- Select the More tab in the TalkTalk PLUS app
- Under Manage your data, select Marketing Preferences
- Select the button next to any options you'd like to consent to / remove consent from
- Select Submit to save your changes.
You have the right to object to us processing your personal data in certain circumstances, e.g. if we are processing it for legitimate interests* or for direct marketing, including profiling.
When you do register an objection, please be aware that this may impact what we can do with your personal data e.g.:
- Any product and service recommendations are likely to be less relevant as these are typically based on how you’ve used our services.
- Offers are typically based on your behaviour and therefore may be less relevant if we cannot process all the personal data we hold.
- We will not be able to use feedback from you to improve the service we provide to you and other customers.
- We will not be able to use your personal data in determining how effective our communications are.
Additionally, you have the right to request that we restrict the processing of your personal data. E.g. if your personal information is not accurate
How to request
To register your objection in the TalkTalk PLUS app:
- Select the More tab in the TalkTalk PLUS app
- Under Manage your data, select Data Privacy
- Select Right to object/restrict
- Select any settings you wish to object to, then select Submit to save your changes
If you've legally changed your name, you'll need to submit a change of name form. Please note that the change of name form is only to change the name of the existing account holder. If you've noticed a mistake in the name on your account, e.g. a spelling error, please contact us and we'll amend this for you. To change your name in the app:
- Go to your personal details in the More tab
- Select your name
- In the Change my name screen, download the name change form using the link provided
- Take a photo of your completed form along with your supporting documents
- Message us using the link on the Change my name page to submit your pictures
We require you to send us ID with the form to process a name change request. You can find a list of acceptable forms of ID evidence on the Change my name page in the app.
To change the owner of your account, both the current account holder and the new account holder will need to complete a Change of Ownership form. This can be requested by chatting to us in the app.
Contact Us
You can get answers to any of your questions in a way that suits you;
With our live chat team
Call us 0345 172 0088
Email us HeretoHelp@talktalkplc.com
Or you can write to us if you prefer.
Please send any questions you have about our Privacy Policy to the below address:
Data Protection Officer
TalkTalk
Soapworks
Colgate Lane
Salford
M5 3TT
For any queries about your Information Rights, including Subject Access Request, please write to us at the below address:
Data Protection Office
TalkTalk (Compliance)
PO Box 673
Salford
M5 0NH
Privacy Policy
We appreciate you stopping by to read our Privacy Policy; we've tried to keep it as straight forward as possible.
You can find out more information within our Privacy Policy