Your Rights

Please note that some data protection rights are subject to exceptions or conditions. There may be circumstances where we are unable to meet a request, for example, where we are required to process personal data to meet a legal obligation, to carry out our public functions, or where specific exemptions apply, such as the prevention or detection of crime or legal professional privilege.

Your data protection rights

You have the right to:

• Access your personal data: you can request a copy of the personal data we hold about you. This is known as a subject access request.
• Have inaccurate data corrected: you can ask us to correct personal data that is inaccurate or incomplete.
• Have your data erased: you can request that your personal data be deleted where there is no lawful reason for us to continue to use it. 
• Object to certain uses of your data: this includes the right to object to your personal data being used for direct marketing or profiling.

How to exercise your rights

If you would like more information about your rights, or wish to exercise any of them, please contact us using the details set out in the ‘Contact us about your personal data’ section below.

If you are requesting access to the personal information we hold about you, you may wish to use our template subject access form.

How to make a data protection complaint

If you are concerned about how Historic England has handled your personal data, you can raise a complaint with us directly. 

Please provide enough information for us to understand your concern and how it relates to your personal data. This will allow us to review the matter and respond to you. 

Complaints can be made using the same contact details set out in the ‘Contact us about your personal data’ section below. 

You can find more information about how to make a data protection complaint, including the type of information it is helpful to provide, on our Data Protection Complaints page. 

If you remain dissatisfied after receiving our response, you have the right to raise your concern with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.