That is correct. You can issue Subject Access Request under the Data Protection Act to find out information about an individual (yourself) and who this has been shared to. You can only issue a SAR in writing and there is a capped charge for £10 for the privilege.