Legal
GDPR Policy
Last updated: 3 July 2026
Sutton Coldfield Travel Clinic complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy summarises how we meet those obligations and the rights available to you.
Data controller
Sutton Coldfield Travel Clinic, 416 Birmingham Road, Wylde Green, Sutton Coldfield, Birmingham, B72 1YJ. Contact: hello@suttoncoldfieldtravelclinic.co.uk · 0121 373 7992.
Principles
- Lawfulness, fairness and transparency in all processing.
- Collection limited to specified, explicit and legitimate purposes.
- Data minimisation and accuracy.
- Storage no longer than necessary.
- Integrity and confidentiality (security).
- Accountability — we document and review our processing.
Your rights
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete data, subject to legal retention duties.
- Restriction — ask us to pause certain processing.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests or direct marketing.
- Withdraw consent — where processing relies on consent, at any time.
Making a request
Email hello@suttoncoldfieldtravelclinic.co.uk with the subject "Data Subject Request". We may need to verify your identity. We respond within one month and free of charge in most cases.
Security
We use appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit and staff confidentiality training. In the event of a personal data breach likely to result in risk to individuals, we will notify the Information Commissioner's Office within 72 hours and, where required, the individuals affected.
International transfers
Where personal data is transferred outside the UK, we rely on adequacy decisions or appropriate safeguards such as UK International Data Transfer Agreements.
Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office — ico.org.uk.