Data rights
Your information, and your control over it
A right that is difficult to exercise is not a right. Requests are received in writing and answered by a named person.
What you may request
- Confirmation of whether we hold information about you.
- A copy of that information.
- Correction of information that is inaccurate or incomplete.
- Deletion, where no legal or clinical obligation requires retention.
- Restriction of processing, or objection to it.
- Withdrawal of a consent you previously gave.
How to make a request
Write to privacy@xion.group describing what you are asking for. Please do not include sensitive clinical detail in the request itself.
What happens next
We confirm receipt, verify that the request comes from you or an authorised representative, and respond within the timeframe required by applicable law. If we cannot fulfil part of a request, we explain why.
Clinical records
Records relating to care delivered through RARL are handled under health-specific procedures and may be subject to retention obligations that limit deletion.
PlaceholderVerification procedures, statutory response windows, and jurisdiction-specific rights require legal review. The request address below is a placeholder pending domain configuration.