Answer every data request on time.
Log requests from people about their personal data, keep the one-month deadline and send the right letter. One offline file.
What the rules ask
- Who: every organisation under the GDPR or UK GDPR.
- Requests: access, correction, erasure, restriction, portability and objection.
- One month: answer within one month of receiving the request.
- Extension: up to two more months for complex or many requests, if you tell the person within the first month.
What is inside
Log a request
Requester, date and type of request.
Deadlines
The correct due date, also at the end of a month, with an extension button that checks the first-month rule.
Letters
Acknowledgement, ID check, extension notice and answer, including what an access answer must contain.
Export
JSON and CSV for your records.
Why offline
Requests contain personal data. This kit runs in your browser, with no server, account or upload.
Who it is for
- Small businesses, shops and agencies
- Office managers who handle privacy on the side
- Privacy consultants with many small clients
Guides
- DSAR response letter template: a copyable answer letter with all Article 15 points.
- DSAR deadline and extension: how to count one month and when you may extend.
- Verifying identity for an access request: proportionate checks and a template.
- Spreadsheet, tool or consultant?: an honest comparison of three ways to handle requests.
Get it
$49 one-time
- One HTML file, works offline in any browser
- No account, no upload, no subscription
- Free updates when the rules change
You get the file and an invoice within one working day.
Questions
Is this enough for an access request?
The answer letter lists what the GDPR asks you to include. You still collect the data yourself.
Does it work for the UK?
The deadlines and request types are the same under the UK GDPR. Check the ICO's current guidance.
Where is the data stored?
Only in your browser.