Your rights under GDPR


Your rights under GDPR

The right to be informed

You have the right to be informed about the collection and use of your personal information.

We must provide you with information including: our purposes for processing your personal information, our retention periods for that personal information, and who it will be shared with. We call this ‘privacy information’.

The right to request access

You have the right to obtain:

  • confirmation that your data is being processed
  • access to your personal data
  • other information
  • evidence that we treat your information within the rules of the law

The right to request rectification

You have the right to ask that any information you believe is inaccurate to be corrected or completed if it is incomplete.

The right to request erasure

You have the right to ask that we delete any information we hold about you. This is also known as the right to be forgotten.

The right to restrict processing

This means that you can limit the way we share your information. This is an alternative to requesting the erasure of your information.

This means that we can hold your information but we cannot use it or share it with external organisations.

The right to data portability

This allows you to ask for and reuse your personal information for your own purposes for different services.

It allows you to move, copy or transfer personal information easily from one IT environment to another in a safe and secure way, without any effect on your ability to use it.

The right to object

The right to object:

  • to us using your information for reasons other than to provide you with care
  • to your information being used for direct marketing (including profiling)
  • to your information being used for purposes of scientific or historical research and statistics
Back to top