We may ask you to verify your identity. Only enough to be confident we are not handing your data to somebody else — usually confirming you control the email address. We will not ask for identity documents unless the request is unusual, and we will not keep anything you send for verification beyond the request itself.
We will respond within 30 days. If a request is genuinely complex we may extend that, and we will tell you why before the first 30 days are up.