Intake and Deadline
Record the request date, requester identity, email/account, request type and response deadline. The normal UK GDPR response period is one month, subject to lawful extension for complex requests.
Legal Centre
GDPR Rights Request Process
How subject access, rectification, erasure, restriction, objection, portability and consent withdrawal requests are handled.
Identity Verification
Verify the requester before disclosing personal data. Where a solicitor, agent or representative makes the request, confirm authority.
Access and Portability
Admin users may use the GDPR export workflow to collect account, KYC metadata, bid, payment, document access, notification and audit records. The export must be reviewed and redacted before being sent.
Erasure and Anonymisation
Where erasure is valid, non-essential profile/contact data can be anonymised. Auction, AML, payment, legal-pack and audit records may be retained where legally required.
Closure Record
Record the response, completion date, outcome, legal basis for any refusal or partial refusal, and evidence of what was supplied or changed.
Independent advice
Property auction documents should be reviewed with appropriately qualified legal, financial, tax and surveying advisers before any binding decision is made.