The ICO have said that social media is an acceptable way of sending a SAR