Skip to content
English
  • There are no suggestions because the search field is empty.

Submitting a Data Subject Access Request (SAR)

Overview

Under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and UK GDPR, individuals have the right to request access to personal data held about them.

This article explains how to submit a Data Subject Access Request (SAR) to EngageRocket and what information is required to help us process your request efficiently and within statutory timelines.

Your rights

You have the right to:

  • access your personal data;

  • request rectification or erasure;

  • request restriction or object to processing; and

  • lodge a complaint with the relevant supervisory authority if you are dissatisfied with the handling of your request.

Who can submit a SAR?

Any individual (“data subject”) whose personal data is processed by EngageRocket may submit a SAR.

Please note:

  • Where EngageRocket acts as a data processor (e.g. for employee surveys), requests may be coordinated with the relevant data controller, such as your employer.

If your data was collected as part of an employee survey or similar activity, EngageRocket processes that data on behalf of your employer. In such cases:

  • your request may be shared with your employer for review and approval; and

  • your employer may respond directly or instruct EngageRocket on how to proceed.

What happens after you submit a request?

  • We will acknowledge receipt of your request within 48 hours, including any redirection where applicable.

  • We may request additional information to verify your identity before proceeding.

  • Requests are normally completed within 30 calendar days, unless an extension is permitted under applicable law.

  • If an extension or limitation applies, you will be informed accordingly.

How to submit a SAR

To submit a SAR, please email us at: compliance@engagerocket.co

What to include in your request

To help us process your request promptly, please include the following information in your email:

  1. Your full name

  2. Your work email address

  3. Your organisation / employer (if applicable)

  4. Country of residence

  5. The type of request you are making (e.g. access, rectification, erasure, data portability)

  6. Details of your request, including any relevant context

  7. Confirmation of identity, or acknowledgment that we may request additional information to verify your identity

Providing complete information helps ensure your request can be processed within the required timeframe.

Last updated
22 Dec 2025