Make a request
To ask about your personal data or make a request, contact CCW’s personal-data contact at consultant@ccwsg.com.
- Tell us what you need. Say whether you want access to personal data, a correction, to withdraw consent or help with a concern.
- Tell us which record. Include the enquiry or job reference, the period involved and a way to reply. Leave unrelated personal information out of supporting documents.
- Confirm that you can make the request. We may need information to check that the request relates to you or that you are authorised to act for someone else. Do not send identity-document copies unless an appropriate way to verify your identity or authority has been agreed.
Access and correction
Subject to the PDPA’s requirements and exceptions, you can request personal data held about you and information about how it was used or disclosed during the preceding year. You can also ask for errors or omissions to be corrected.
Access is to be provided as soon as reasonably possible and corrections made as soon as practicable. If an access or correction request cannot be completed within 30 days, the PDPA requires written notice within those 30 days saying when you can expect a response.
Access may be limited where an exception applies, including to protect another person’s information. Any access fee that applies should be explained before you incur it.
Consent and keeping records
If you want to withdraw consent, tell us which purpose it relates to. Any effect on an ongoing service needs to be explained. Withdrawing consent does not undo lawful processing that has already taken place. Processing may continue where the law permits or requires it.
You can also ask what information is kept and why. The PDPA’s retention rules apply when information is no longer needed for its purpose and there is no business or legal reason to keep it.
Raise a concern
Tell us what happened, when it happened and what outcome you are looking for. Include the enquiry or job reference if you have it. For questions about how this website handles information, see the Privacy Policy.
The Personal Data Protection Commission offers guidance and ways to raise personal-data concerns.
