These terms are between the organisation using the Services (“you”) and Pilbeam & Co. Ltd (company number 02801554), trading as DSAR.uk.
By using the site or Services, you agree to these terms. If you do not agree, do not use them.
1. Who the service is for
The Services are designed for UK organisations responding to a current or former employee Data Subject Access Request. They are not intended for consumer use, customer DSARs, or general compliance programmes.
You confirm that the person submitting triage or using the tools is authorised to act for your organisation.
2. Not legal advice
DSAR.uk provides search, discovery, processing, redaction and response-preparation technology, and limited operational support. It supports HR practitioners, Data Protection Officers and solicitors. It does not replace legal advice.
You remain responsible for deciding what to search, what to disclose, what to withhold, and how to respond to the requester and the ICO.
3. Access and triage
Access may be limited and is not guaranteed. We may review timing, scope and operational fit before providing tools or paid processing. Submitting triage does not create an obligation on either party to proceed.
4. Free local search
The free search is intended to run against locations you select. Original files are not uploaded during that stage. You are responsible for using the tool only on systems you are authorised to search, and for how you handle the match list.
5. Optional paid processing
Classification, redaction and bundling are optional and charged per the published rates, or a written quote, for the pages and stages you use. There is no subscription and no minimum fee unless we agree otherwise in writing.
You choose which files to submit. You must not submit data you are not authorised to process. Charges apply only to pages that progress to the relevant stage. Estimates on the website are illustrative.
Charges for optional paid processing will be confirmed before work proceeds. VAT may apply.
6. Your responsibilities
You must:
- Use the Services only for lawful DSAR handling
- Keep any account credentials confidential
- Review outputs before disclosure, including redactions and exemptions
- Not attempt to reverse engineer, disrupt or misuse the Services
- Comply with UK GDPR and other applicable law as controller of the employee data
7. Our responsibilities
We will provide the Services with reasonable care and skill. We do not warrant that search results are complete, that classification or redaction is error-free, or that use of the Services will prevent an ICO complaint or claim.
8. Intellectual property
We and our licensors own the site, tools and software. You retain ownership of files you submit. We may use anonymised operational statistics to improve the Services.
9. Liability
Nothing in these terms excludes or limits liability that cannot legally be limited, including for death or personal injury caused by negligence, or for fraud.
Subject to that, we are not liable for indirect or consequential loss, loss of profit, or loss of data except to the extent caused by our failure to take reasonable care of data we process for you. Our total liability arising out of a particular DSAR engagement is limited to the fees paid for that engagement.
10. Confidentiality
Each party must keep the other’s confidential information confidential, except where disclosure is required by law or to professional advisers under a duty of confidence.
11. Data protection
Website and triage data is described in the Privacy Policy. Employee files submitted for processing are described in Data Processing Information. For paid processing we act as your processor; you remain the controller.
12. Suspension and termination
We may suspend or end access if you breach these terms, if use is unlawful, or if the service is not a fit for the request. You may stop using the Services at any time. Paid work already performed remains payable.
13. Changes
We may update these terms by posting a new version on this page. Material changes to an active paid engagement will be notified to the contact we have on file.
14. Governing law
These terms are governed by the laws of England and Wales. The courts of England and Wales have exclusive jurisdiction.