Under UK GDPR, you have the right to request a copy of the personal data we hold about you. This is called a Subject Access Request (SAR or DSAR).
How to make a request
Contact our support team with the following:
- Your full name
- The email address associated with your account
- What information you'd like (e.g. all data, specific orders, consultation records)
- Proof of identity — we may ask for a photo ID to confirm it's you
What you'll receive
Depending on what you've asked for, this can include:
- Your account details and contact information
- Order history and dispensing records
- Consultation responses and prescriber notes
- Records of communication with our team
How long it takes
We respond to SAR requests within one calendar month as required by UK GDPR. For complex or extensive requests, we may extend this by up to two further months — we'll let you know if that applies.
Is there a charge?
No — SAR requests are free. We can only charge a reasonable fee if a request is manifestly unfounded or excessive.
Your other data rights
You can also:
- Ask us to correct inaccurate information
- Request deletion of your data (subject to legal retention requirements)
- Object to certain types of processing
- Request a copy of your data in a portable format
If you're not satisfied with how we handle your request, you can complain to the Information Commissioner's Office at ico.org.uk.