UK GDPR • Data Rights

GDPR & Your Data Rights

If you are in the UK (or UK GDPR otherwise applies), you have rights over your personal data. This page explains those rights and how to make a request.

Effective date:
Requests email: info@medibrainuk.co.uk
Response time

We aim to respond to valid GDPR requests within 1 month.

Tip
Use the subject line: GDPR Request - MedibrainUK to help us route your request quickly.

1. Controller details

For the purposes of UK GDPR, MedibrainUK is the controller of personal data processed through our website and communications. For privacy questions and rights requests, contact us at info@medibrainuk.co.uk.

2. Your rights under UK GDPR

Depending on your situation, you may have the right to:

  • Access your personal data
  • Rectification of inaccurate or incomplete data
  • Erasure (deletion) in certain circumstances
  • Restriction of processing in certain circumstances
  • Data portability in certain circumstances
  • Object to processing based on legitimate interests
  • Withdraw consent where we rely on consent

3. How to make a request

To make a GDPR request, email info@medibrainuk.co.uk and include:

  • Your full name
  • The email address/phone number you used to contact us (if different)
  • What right you want to exercise (access, deletion, correction, etc.)
  • Any helpful context (dates, messages, programme name)
Recommended email subject
GDPR Request - MedibrainUK

4. Identity verification

To protect your privacy, we may need to verify your identity before responding. The level of verification depends on the request and the risk. We will only request information that is reasonably necessary for verification.

5. Complaints

If you are not satisfied with our response, you can complain to the UK Information Commissioner’s Office (ICO). We encourage you to contact us first so we can try to resolve your concern.