Subject Access Request

Data Subject's Access to Personal Data
The General Data Protection Regulation, or GDPR, states that individuals have the right to ask organisations to confirm whether or not these organisations hold and process their Personal Data. This Personal Data could include your name, identification number, contact details, bank details, race, gender, age, health status, email address, location, online identifier and the like.

Individuals also have the right to access their Personal Data. They may do this in order to challenge the accuracy of such data and to request rectification of any inaccurate data. There are other reasons too, like erasure and data portability.

Erasure, or 'the right to be forgotten'
You may have come across this term in the media. There are instances where you may request an organisation to erase or delete your data. For example,

Where the data is no longer needed to satisfy the purpose for which it was collected in the first place
Where an individual has withdrawn the consent initially given for collection of the data
Where the individual has successfully raised an objection to the processing
If the data is being processed unlawfully
Where the data was collected in relation to the offer of information society services to a child
Data portability
In some cases, an individual has the right to have his or her data transferred to other organisations. This is where automated processing takes place and the processing is based either on consent from the individual or on a contractual relationship between the individual and the organisation.

Fees
Kindly note that there may be instances where we might charge a fee for copies of records - especially where the requests are excessive or incur significant administrative costs.

How to make a request
Complete and submit the form below or you may download and print a copy, complete it and then email or fax it as directed on the form.

REQUEST FOR ACCESS TO RECORD OF A PRIVATE BODY

REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016

The Data Subject shall have the right to obtain from the Controller, confirmation as to whether or not Personal Data concerning him or her are being processed, and, where that is the case, access to the Personal Data.

A. Particulars of the Controller from whom you are requesting accessthe right, the opportunity or the means of finding, using or retrieving information

Company name	Cadogan Clinic
Address	120 Sloane Street
Country	United Kingdom
Telephone	0207 901 8500
Email	cadogan@cadoganclinic.com

Data Protection Officer

Name	Aleem Arif
Address	59 Markham Street
Telephone	0207 901 8500

B. Particulars of the person making the request

Names and surname

Form of identity

Identity number

Postal address

Telephone number

Fax number

Email address

Are you applying on behalf of another person? (If Yes also complete section C. below)

C. Particulars of the person on whose behalf the request is made

This section must be completed ONLY if a request is being made on behalf of another person.

Give reasons why the person is unable to personally make the request

Names and surname

Form of identity

Identity number

D. Particulars of the record being requested

Provide full particulars of the record to which accessthe right, the opportunity or the means of finding, using or retrieving information is requested, including any reference number if that is known to you, to enable the record to be located. Examples include your personnel file, emails between 'A' and 'B' (between certain dates), your medical records held by your doctor, CCTV camera images, copies of statements, your exam results, educational records.

Description of the record

Reference number

E. Our response to your request

How would you prefer our response and any information to be presented to you?

Your preference

Please specify

F. Details of the right/s you wish to exercise

Individuals have the right to request accessthe right, the opportunity or the means of finding, using or retrieving information to information about them that we hold. They also have the right to object to processingany operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal dataany information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person that is likely to cause, or is causing, damage or distress, the right to prevent processingany operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction for the purpose of direct marketing, the right to object to decisions being taken by automated means and, in certain circumstances, have inaccurate personal dataany information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person rectified, blocked, erased or destroythe process of eliminating or deleting records beyond any possible reconstructioned. They also have the right to lodge a complaint with a Supervisory Authority.

Provide details of your personal dataany information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person which might be incomplete, inaccurate or outdated, which you wish for us to rectify

Provide details of your personal dataany information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person you may wish for us to erase, e.g. where we no longer have a purpose to use the data; where you want to withdraw any consentof the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her previously given for us to use it; where our usage may be unlawful or where the data belongs to a childper the GDPR, parental consent is required for children below 16 years. Member States may lower this age but not below 13 years. who makes use of our online services

Provide details of your personal dataany information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person you wish for us to stop processingany operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction e.g. while we may be verifying the accuracy of your data; where you might oppose the erasurethe process of eliminating or deleting records beyond any possible reconstruction of data being processa set of interrelated or interacting activities that transforms inputs into outputsed unlawfully; where we no longer use the data but you may need for us to keep the data for legal purposes or where you might have objected to processingany operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction, but we may be challenging on legitimate grounds

Provide details of your personal dataany information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person you may wish for us to give to you or any other organisation or organisation. This can only be your personal dataany information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person which we processa set of interrelated or interacting activities that transforms inputs into outputs on computers and where you have given us your consentof the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her to processa set of interrelated or interacting activities that transforms inputs into outputs that data

Provide details of objections you might wish to raise e.g. in respect of any direct marketing to yourself, any machine based (computerised) decision we might be making (e.g. credit scoring, e-recruiting), or any profilingany form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements we might be doing around matters such as your personal preferences, work performance, economic situation, healthpersonal data concerning health should include all data pertaining to the health status of a data subject which reveal information relating to the past, current or future physical or mental health status of the data subject, behaviour, location or movements

G. Fees

Depending on the type of request and the number of records requested, we may charge certain fees to service the request. Please contact us directly should you have any query with regards to fees. Where requests from a Data Subject are manifestly unfounded or excessive, in particular because of their repetitive character, the Controller may either charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or refuse to act on the request. The Controller shall bear the burden of demonstrating the manifestly unfounded or excessive character of the request.

2023

Aesthetic Journal

Highly Commended

2023

Aesthetic Journal

Best Clinic in London Shortlist

2021

Aesthetics Awards

Highly Commended

2021

My Face My Body

Best Clinic Winner

2020

My Face My Body

Best Clinic Winner

2019

My Face My Body

Winner

2018

My Face My Body

Highly Commended

2018

Aesthetics Awards

Highly Commended