Send the request to [email protected], or use the Privacy Rights and Data Request Portal in the patient privacy centre. You can ask whether GetClinic processes personal information about you, get a copy of it, and receive the supplementary information the law requires, such as the purposes, categories, sources, recipients and retention periods.
You do not need an account to make the request, and you do not need to know which law gives you the right. The Portal is described in its own terms as a convenient request method, not a trap: a valid request is not invalid because you sent it to another GetClinic channel or used the wrong label.
What you get, and in what format
Where a portability right applies, GetClinic provides eligible data in a structured, commonly used and machine-readable format. Where the law requires it and it is technically feasible, you can also ask for direct transmission to another provider.
Where a consumer-health-data law applies, an access response also includes the legally required list of the third parties and affiliates that received your consumer health data, together with an active email address or other online contact mechanism for them.
See the full list of privacy request types.
How a health export is delivered
Not as an email attachment. Section 11 of the Portal says sensitive exports, especially health data, should be delivered through a secure authenticated download or other protected delivery mechanism, and that ordinary email should be used for notifications or low-risk correspondence rather than as the default channel for a full medical-data export.
The same caution runs the other way. Section 5 asks you not to send medical records, passport scans or national identity documents in an ordinary email simply to start a request. If that evidence is genuinely necessary, GetClinic provides a secure verification or upload route.
What may be left out
An export is not unconditional. Section 11 allows GetClinic to exclude or protect:
- information concerning another person
- privileged material
- security secrets
- anti-fraud logic
- other information the law permits or requires GetClinic to withhold
If part of your request is refused, the response explains the reason to the extent the law allows, and gives you the appeal, regulator-complaint or judicial-remedy information that applies.
How long it takes
GetClinic aims to acknowledge a rights request within two business days. That is an operational target: Section 9 states it does not replace a shorter legal deadline and does not postpone the request's legal receipt time.
The statutory clock depends on the law that applies to you.
Where more than one law covers the same request, Section 10 says GetClinic uses the shortest applicable deadline rather than assuming a single global period.
Cost, and what happens if the Portal is down
Privacy-rights requests are free by default, and Section 15 says no automatic fee is built into the Portal. A fee or a refusal on the ground that a request is manifestly unfounded, excessive or repetitive may only be used where the applicable law permits it and GetClinic can document the basis.
A Portal outage does not suspend your rights. Send the request to [email protected] instead, or to [email protected] if an accessibility problem affects both routes. Section 19 says GetClinic uses the first clear receipt timestamp through an available route for legal timing, and that a technical outage or accessibility barrier should not be used to manufacture lateness.
GetClinic is a technology marketplace. The clinic you choose provides your healthcare and is responsible for it. This article is general information about how GetClinic works, not medical advice.
See how your clinic's own records differ. See the Privacy Rights and Data Request Portal.