Privacy · Community report
Submit a data access request
Submit a data access request. Fill in a company's own request form from your details and send it through the route the company names.
What you can get
Reaches your accounts Creates or changes things in accounts you connect, with your approval.
-
It does
- Reads the form and the details you supply
- Fills in the company's own form or drafts the request email
- Sends only after you approve the completed request
-
It stops and asks
- Before it starts: the company's own request route is identified.
- Before sending: every field on the completed form checked by you.
- After sending: the acknowledgment saved and a reminder set for the reply.
-
You approve
- Your approval before the request is sent
- No authority to send identity documents you have not chosen to share
Derived from this task's own brief and steps, not from the source.
- Find the routeStops for your approval
The company's own form, portal or privacy address.
- Fill in the form
Completed from the details you give, returned to you.
- Check and approveStops for your approval
Every field read by you before it is sent.
- Log and remindStops for your approval
Copy, date and reference saved, reminder set.
Editorial, not from the source
Works when
- You know which company you want to ask, and it publishes a route for requests.
- The company sent you a form, such as a docx, and filling it in is the part you keep putting off.
- You will read the completed form before it is sent.
Does not work when
- You need advice on your legal rights or on a dispute with the company.
- You are unsure which personal documents you are comfortable sharing.
- You want requests sent to many companies at once without reviewing each one.
Submit a data access request: request record
| Item | Based on | Status |
|---|---|---|
| [Request route] | [Company's privacy notice, with link] | [Found / not found] |
| [Completed form] | [Details you supplied] | [Checked by you] |
| [Sent] | [Date, copy and reference] | [Awaiting reply / answered] |
The source case
On X, @aliceisplaying posts what they call an incomplete list, drawn from their chat logs, of things Instinct helped with over five days. One line says it filed a data-access request from start to finish. In an earlier post the same day, they say one of the first things they used it for was filling out a form they had received as a docx for a GDPR request, and that it did so well. Neither post names the company, shows the form or what was sent, or says whether a reply or any data arrived. Checked on 2026-09-24. This is an individual report, not evidence of how any company will respond to a request.
A public report by someone outside this library. Not independently reproduced here.
From the source
Source excerpt
had astra dig thru the chatlogs & here's an incomplete list of things instinct helped me with in the last 5 days: ... - filed a data-access request from start to finish
Source excerpt
one of the first things i used instinct for is to fill out a form i got in docx for a gdpr request and it did that so well
Quoted from the original posts. Not written by this guide, and not a result produced here.
Suggested prompt
Bring The company's request form or privacy contact, Your name, contact details and account identifiers, Any identity proof the company asks for. Acts Reads the form and the details you supply. Fills in the company's own form or drafts the request email. Sends only after you approve the completed request. Source community report, checked 2026-09-24.
Written by this guide as a starting point, not quoted from the source. Your edits stay in this browser.
Other ways to ask
Editorial rewrites of the brief above, for a different emphasis. Copy them separately.
What you need
Editorial, not from the source
You supply
- The company's request form or privacy contact
- Your name, contact details and account identifiers
- Any identity proof the company asks for
Connected
- Email, if the request goes by email
- Web access to the company's privacy page or portal
How to try it
Editorial, not from the source
- Find the company's own route for access requests: a form, a privacy email address or a portal named in its privacy notice.
- Give the form, or the link, and the details it asks for. Share identity documents only if the company's own process requires them.
- Ask for the completed form back before it goes anywhere, and read every field.
- Approve the send, and keep a copy of the form, the date and any reference or acknowledgment.
- Set a reminder for when you expect a reply, and watch the inbox, including spam, for identity checks or follow-up questions.
Use the company's own route
In the reports behind this page, @aliceisplaying says one of the first things they used Instinct for was a GDPR request form that came as a docx, and later lists a data-access request filed from start to finish. The posts do not say where the form came from, but a form sent by the company is a useful sign of the right route. Most organisations that accept these requests publish how in their privacy notice: a web form, a portal or a named email address. Start there, and have the link or address shown to you before anything is filled in. A request sent to a general support inbox may still be answered, but it is harder to track and easier to lose. Keeping to the published route also keeps the paper trail clean if you need to follow up.
Check the form before it goes
Filling in the form is the part that stalls, and it is also the part where small errors matter. Names, old email addresses, account numbers and the period you are asking about all need to match what the company holds, or the request may come back with a question instead of your data. Ask for the completed form back in the format it arrived in, read each field against your own details, and only then approve the send. Identity proof deserves particular care. Some companies ask for it and some do not; decide yourself what you are willing to share, and do not attach documents the form did not ask for. The author reports the form was done well, but does not say what was on it.
Keep the record, then wait
Once the request is sent, save a copy of exactly what went out, with the date and any reference the company returns. That record is what you point to if nothing arrives. How long a company has to reply, and whether it can take longer, depends on the law that applies, which this page does not try to state; the company's privacy notice or your data protection authority are the places to check. Set a reminder for when you expect an answer and watch for follow-up questions or identity checks, which sometimes land in spam. Neither post says what came back, so treat the source as evidence that the form can be filled in and filed, not that any particular outcome followed.
Open Instinct to try it. That is the product's own site; this guide is not part of it.
Limits and confirmation points
- Two short lines from one author. Neither names the company or shows the form, what was sent or whether any data came back.
- Whether a company must answer, how fast and in what form depends on the law where you are and where it operates. This page gives no legal advice and states no deadlines.
- Requests often ask for proof of identity. Sending copies of documents is your decision; share only what the company's own process asks for.
- A request sent is not a request answered. Companies may ask follow-up questions before they reply.
Editorial, not from the source
- Before it starts: the company's own request route is identified.
- Before sending: every field on the completed form checked by you.
- After sending: the acknowledgment saved and a reminder set for the reply.
Editorial, not from the source
- The form arrives as a docx or PDF that is awkward to edit
- Ask for the completed copy back in the same format and compare it field by field with your details before it is returned to the company.
- The company asks for more identity proof
- Check the request came from the company's own address, then decide yourself what to send. Do not let an agent choose documents for you.
- No acknowledgment arrives
- Check spam first, then resend through the same official route with the original date noted.
Common questions
What is a data access request?
A request asking an organisation for a copy of the personal data it holds about you. Under GDPR it is often called a subject access request. What must be provided, and when, depends on the law that applies.
Can an agent file a data access request for me?
One user reports that Instinct filed one from start to finish, and separately that it filled in a GDPR form that came as a docx. The posts do not name the company or say what came back, and this directory has not reproduced it.
Should I send ID with the request?
Only if the company's own process asks for it, and only what you are comfortable sharing. That choice stays with you.
How long does the company have to reply?
It depends on the law that applies. This page does not state deadlines; check the company's privacy notice or your data protection authority.
What if the company never answers?
Check spam and the original route, then follow up with the date and a copy of the first request. Formal complaints go through the relevant regulator, which is outside what this page covers.
Next in Privacy
Get recurring task recommendations — ask your own agent to check for relevant updates.