PATIENT ACCESS REQUEST POLICY

This policy explains how to request access to your personal data under UK GDPR.

1. Rights

You may request:

• • Copies of your personal data
  • Corrections
  • Information on how your data is used
  • Data portability where applicable

2. How to Request

Submit a request via:

• • Our Subject Access Request form
  • Email or postal request
  • Verbal request (may require written confirmation)
  • Provide:
    Name, DOB, contact details
  • Description of requested records
  • Proof of identity if required

3. ID Verification

We may request ID to confirm identity and protect confidentiality.

4. Response Time

• • We respond within one calendar month
  • Complex requests may take up to 2 additional months with notice

5. Fees

Free unless repeated or excessive requests are made.

6. Limits on Release

We may withhold data if disclosure would cause serious harm or impact third-party confidentiality.

7. Delivery

Records are usually supplied via secure encrypted email using Gmail Business.
Printed records may be collected in person with ID.

8. Concerns

Complaints may be made to the ICO if unresolved internally.

SUBJECT ACCESS REQUEST FORM