Go to page content

Find out what you lost in a data breach. It's fast and completely free.

Think your information has been compromised? Find out what a breached company knew about you today, then take action.

Why should I send a request to a company that's had a data breach?

You should send a request to make sure that you know what personal data was lost, so that you can protect yourself later.

Types of personal data that could have been compromised:

  • Name, address and contact details
  • Bank and insurance details
  • IP Address & Cookie identifiers
  • Marital status and number of children
  • Political opinions and affiliations

This personal data could be used to financially harm you, or as a tool for identity theft.

Under GDPR, you have a legal right to access your information for free by sending a subject access request. A subject access request allows you to see all of the information a company holds about you.

What's that?

A Subject Access Request, or ‘SAR’ is a written request that you send to a company asking to see your personal data.

Why should I use Rightly to send a request?

If you think your information has been compromised due to a data breach - perhaps you've seen it on the news or by using a tool like PWNED - you should find out what you've lost so you know the scale of the problem.

Through Rightly, you can send a request quickly, easily and for free. No finding data protection emails or needing to supply excessive amounts of information, just one process with lots of customer support.

Our mission is to make data fairer for all, which means no hidden costs, subscriptions or data sharing.

If you send a request through Rightly to the breached company and notice sensitive information could have been lost, you can also send a deletion request to make sure it can't happen again, or speak to a member of our support team.

How do I send a subject access request (SAR)?

The easiest way to find out where your information is by sending a request through Rightly.


  • Search for the breached company in the search bar above
  • Add your basic details so that they can identify you
  • Check your email to send your request

If you can't find the company that you're looking for, contact our support team and we'll add it for you straight away.

What if the don't reply to my request?

Don't worry, they have to by law. You can ask any company if they have your personal data, even if you don't know for sure whether or not they have it. They have to tell you what they have, as well as how and why they are using it. This is thanks to your ‘right of access’ under GDPR law. GDPR applies in the UK and EU.

After the company has received your request, they have to reply in full within 30 days, or give a valid reason for asking for an extension, by law. If this happens, our support team is here to help!

Why Rightly?

We’re free because our mission is to make data fairer, for everyone.

We don't use consumer data for commercial purposes, which means we'll never, ever sell your data. It also means that there are no adverts or hidden costs.

Keeping your data safe