The General Data Protection Regulation (GDPR) came into force on 25 May 2018 and governs how companies like Sanctuary collect, store, use and share your personal information (data).

The GDPR replaced the Data Protection Act 1998 and requires all companies to be open and transparent with people they interact with (also known as data subjects).

Under the new regulation, individuals have stronger rights and greater control over their data. This means that you have the right to be informed about how and why your personal information is being used.

Under the new regulation, any data subject (living person) has the right to:

  • be informed about why we are collecting your personal data and how it will be used;
  • request the information we hold on you;
  • withdraw consent. Where we process your personal data on the basis of your consent, you can withdraw your consent at any time meaning we have to stop using the relevant personal data;
  • be ‘forgotten’; this means you can ask us to delete data we have collected and used on the basis of your consent where this data is no longer necessary for the purpose for which it was collected.

Any questions?

If you have any questions, please email