Last Updated: 28 July 2026
Your Right to Access Your Data
Under UK GDPR and the Data Protection Act 2018, you have the right to request a copy of the personal data and clinical records we hold about you. This is called a Subject Access Request (SAR).
There is no charge for making a Subject Access Request in most circumstances. We will respond within 30 calendar days of receiving your completed request and verified proof of identity.
How to Make a Subject Access Request
To submit a SAR, email us at bookings@bodycompositionclinic.co.uk with the subject line ‘Subject Access Request’. Please include your full name and date of birth so we can locate your records.
To protect your privacy, we require proof of your identity before releasing any information. Please provide copies of two of the following documents:
One document confirming your identity:
One document confirming your address:
Please send copies only — do not send original documents. Copies can be emailed to bookings@bodycompositionclinic.co.uk alongside your request. |
What Happens Next
1 | Submit your SAR by email to bookings@bodycompositionclinic.co.uk with the subject line ‘Subject Access Request’. Include your full name and date of birth. |
2 | Provide proof of identity — two documents as listed above. Email copies to alongside your request, or follow the instructions we send you. |
3 | We will acknowledge your request within 5 working days of receiving both your SAR and your proof of identity. |
4 | Your records will be compiled and shared with you via a secure, password-protected SharePoint link within 30 calendar days of receipt of your completed request and verified identity. |
5 | The link will remain active for 14 days. Please download your records within this period. After 14 days the link will expire and you will need to request a new one. |
What We Will Provide
Your Subject Access Request response will include all personal data and clinical records we hold about you at the time of your request. This includes:
Records that are legally required to be withheld — for example, information relating to third parties — will be redacted before sharing.
Retention of Records
Clinical records at BCC are retained for a minimum of eight years from the date of your last consultation, in line with NHS guidance on medical record retention for adults. After this period, records are securely destroyed.
If you request deletion of your data before this retention period has elapsed, we may be unable to comply in full due to our legal obligations to retain clinical records. We will explain what data we can and cannot delete and the reasons why.
Contact
To submit a Subject Access Request or for any data protection enquiry:
Email: bookings@bodycompositionclinic.co.uk — subject line ‘Subject Access Request’
If you are not satisfied with how we have handled your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
