Privacy policy

This policy explains how Insight Medicolegal Ltd (“Insight Medicolegal”) handles personal data, including the special category health data contained in medico-legal instructions. Dr Yameen Qureshi is the data controller for medico-legal work and is registered with the Information Commissioner’s Office under number ZA372209.

Who this policy covers

It covers instructing agents, insurers and other professional clients who contact the practice, and examinees who are assessed for the purpose of a report. Where an examinee is assessed, the instructing agent is normally the party who supplied the records and who receives the report.

What data is processed

• Contact and firm details supplied through the enquiry form or by email.
• Letters of instruction, pleadings, precognitions and productions.
• Medical, occupational, educational and social work records supplied for review.
• Notes of the assessment, mental state findings and the resulting report.

Lawful basis

Personal data is processed on the basis of legitimate interests (the conduct of medico-legal instruction) and, for health data, Article 9(2)(f) UK GDPR — processing necessary for the establishment, exercise or defence of legal claims — together with Article 9(2)(g) where a regulatory or statutory function applies. Consent to the assessment itself is taken separately at the appointment and is recorded in the report.

Sharing

Reports are released to the instructing agent only. Data is not sold and is not used for marketing. Limited processors — secure email, transcription and IT support — may process data under written terms. Disclosure to a court, tribunal or regulator is made only where required by law or by the terms of the instruction.

Retention

Medico-legal files are retained for the period required by professional guidance and by the limitation and prescription periods applying to the underlying action. The retention period applying to a particular file can be confirmed on request to the practice. At the end of that period paper material is destroyed by confidential waste and electronic material is deleted.

Security

Records are held on encrypted devices and encrypted storage, transferred by secure means, and paper material is held in locked storage. Remote assessments use an encrypted video platform and are not recorded unless the instruction expressly provides for it and the examinee consents.

Your rights

You may request access to your data, rectification of inaccurate data, erasure, restriction or objection, and portability where applicable. These rights are qualified where the material forms part of a report prepared for litigation or where legal privilege applies. Requests should be made to instructions@insightmedicolegal.co.uk. You may also complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

See the cookie policy for how this website uses cookies and analytics.

Last reviewed: 1 September 2026. Questions about this policy: instructions@insightmedicolegal.co.uk or 07739 587092.