Hi,(posted 8525 days ago)I believe that from my own experiences you should serve an SAR on those chasing you for the "alleged" shortfall AND serve an SAR on the Halifax. You should also read earlier postings to this forum titled "The HALIFAX - DPA Subject Access Rights - etc." to obtain guidance on how to respond to the Halifax's likely reaction to your Subject Access Rights request.
You should send the Halifax's SAR to:
The Data Controller, Regulatory Risk-UK Non-Investment Business, Halifax PLC, Trinity Road, Halifax, HX1 2RG.
Good Luck,