Skip to main content
blip.

Your data rights

Subject access request

Under Article 15 of the UK General Data Protection Regulation, you have the right to obtain a copy of the personal data that Blip Healthcare Ltd holds about you. This page explains how to make that request.

What a subject access request covers

A subject access request (SAR) gives you access to the personal data we hold about you. For clinical service users, this includes:

  • Your assessment notes and clinical formulation
  • Your care plan
  • Session notes and progress records
  • Risk assessments
  • Outcome measure scores
  • Correspondence we hold about your care
  • Contact and demographic information held on your record

For people who contacted us but did not become clinical service users, the response will cover only the information held in relation to that contact (for example, enquiry form submissions and any correspondence).

How to submit a request

By email

Email enquiries@blip.org.uk with the subject line Subject Access Request. Include your full name, date of birth and, if you have one, your blip reference number. If you are requesting on behalf of a child or young person, include their full name and date of birth and confirm your relationship to them.

By post

Write to the Data Controller, Blip Healthcare Ltd, at our registered office (address available on request via the email above). Mark the envelope clearly as Subject Access Request.

Identity verification

Before we release any information, we will ask you to confirm your identity. This is to protect your data from being disclosed to the wrong person. We will contact you by the email address or phone number we hold on your record to complete this step. We may ask for a copy of photographic ID if we are unable to verify your identity through the information we already hold.

Timescale and cost

Response time

One month

We respond to subject access requests within one calendar month of receiving a valid request. Where the request is complex or we receive a high volume at the same time, we may extend this by up to two further months. We will notify you within one month if an extension is needed and explain why.

Cost

Free

Subject access requests are free of charge in most circumstances. We may charge a reasonable fee if a request is manifestly unfounded or excessive, or if you ask for further copies of the same information. We will tell you in advance if a fee applies.

Requests about children and young people

Whether a parent or carer can access a child's clinical records depends on the age and circumstances of the child.

Under 16

Parents generally have the right to access a child's health records. This does not apply where the child is assessed as having sufficient maturity to consent to their own care (Gillick competent) and has not consented to parental access. We handle these situations sensitively and explain our position clearly.

16 and over

Young people aged 16 and over are presumed to have capacity to manage their own data rights. A parent or carer may submit a SAR on behalf of a young person in this age group only with that young person's explicit consent.

If you are not satisfied with our response

If you believe we have not handled your subject access request correctly, you have the right to complain to the Information Commissioner's Office (ICO).

ICO helpline0303 123 1113
ICO postInformation Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

You can also raise a concern with us directly before going to the ICO. Contact us at enquiries@blip.org.uk and we will try to resolve it.

Your other data rights

A subject access request is one of several rights you have under UK data protection law. You also have the right to:

  • Correct inaccurate or incomplete information we hold about you
  • Ask us to delete your information (subject to legal retention requirements for health records)
  • Restrict how we use your information while a query is being resolved
  • Object to processing in certain circumstances

To exercise any of these rights, contact us at enquiries@blip.org.uk. Our full Privacy Notice explains these rights in detail.

This page is consistent with the Blip Healthcare Ltd Privacy Notice (PRV-001, version 1.0, May 2026).

Data Controller: Blip Healthcare Ltd, trading as blip. Caldicott Guardian: Vivien Beni, Registered Manager.

Full Privacy Notice · Complaints procedure