← All companies

How to Submit a Subject Access Request to Tesco

Under UK GDPR you can ask Tesco for a copy of the personal data they hold about you. Here's the right way to ask, and a free tool that writes the letter for you.

Skip the writing — generate your letter now

Free, no account needed. Fill in your details and get a correctly worded letter addressed to Tesco, ready to send yourself.

Generate my letter to Tesco

What you're entitled to ask for

This is called a Subject Access Request (SAR). Tesco must give you a copy of your personal data, tell you why they hold it, who they've shared it with, and how long they'll keep it — free of charge, within one calendar month.

How to contact Tesco

The most reliable route is to email your request to subjectaccess.request@tesco.com.

Note: Tesco Bank is a separate entity with its own address if relevant.

What happens next

Tesco may ask you to verify your identity before responding — this is normal. Once your request (and identity, if needed) is confirmed, the one-month clock starts. If the deadline lands on a weekend or bank holiday, it rolls to the next working day.

Common questions

Is there a fee to request my data from Tesco?

No — under UK GDPR, organisations including Tesco must provide a copy of your personal data free of charge in almost all cases.

How long does Tesco have to respond?

One calendar month from the day they receive your request, or from the day your identity is confirmed if they need to verify it first.

What's the best way to contact Tesco about this?

The most reliable route is to email your request to subjectaccess.request@tesco.com. A postal address is also usually accepted as a fallback.

What if Tesco doesn't respond in time?

You can complain to the Information Commissioner's Office (ICO). Right-of-access complaints made up 39% of all complaints in the ICO's Annual Report 2023/24 — more than any other category, around 15,000-15,800 in a single year.

For guidance only — this isn't legal advice, and DataDeadline isn't a party to your request or a representative for Tesco. Verify anything deadline-critical against current ICO guidance.

Run a business that receives these instead?

DataDeadline receives every SAR and complaint through your own form, starts the legal clock automatically, and keeps the audit trail. Free to receive and track.