Privacy Policy

Who we are

Dr Jane Doe is the data controller for personal information collected through this website.

• Practice: Dr Jane Doe — Consultant Obstetrician and Gynaecologist
• Address: The Private Hospital, Anytown, AB1 2CD
• Contact: Contact form
• GMC registration: [number]

What information we collect

When you use the contact form on this website, we collect the details you provide:

• Your name
• Your email address
• Your phone number
• The content of your message

If you choose to include personal health information in your message, we treat this as special category data under the UK GDPR and handle it with additional care.

We do not use analytics or advertising cookies, and we do not track your browsing activity across other websites.

How we use your information

We use the information you provide to:

• Respond to your enquiry
• Arrange appointments and consultations
• Provide clinical care where appropriate
• Maintain a record of communications relating to your care

Legal basis for processing

We rely on the following legal bases under the UK GDPR:

• Consent — when you submit the contact form
• Legitimate interests — where it is necessary to manage our correspondence and run the practice
• Article 9(2)(h) — where processing of health-related data is necessary for the provision of healthcare

Who we share your information with

We share your information only where necessary:

• IT service providers — we use a small number of trusted service providers to host this website and handle contact form submissions. Any such providers act as data processors on our behalf and may only process your information on our instructions.
• Healthcare providers — where your care involves referral or coordination (for example, with The Private Hospital, insurers, or other clinicians), we share relevant information with your consent.
• Regulatory and professional bodies — only where required by law or professional duty.

We do not sell your information and we do not share it for marketing purposes.

International transfers

Our contact form is protected by Google reCAPTCHA (see our Cookie Policy), which is operated by Google and may involve the transfer of limited technical data outside the UK. Google applies appropriate safeguards, including the UK International Data Transfer Addendum and Standard Contractual Clauses.

How long we keep your information

Non-clinical enquiries are retained for up to two years from the date of last contact, after which they are deleted. Where your enquiry leads to clinical care, relevant records are retained in line with UK healthcare record retention guidelines — typically eight years for adult records, or until a minor reaches age 25.

Security

We take appropriate technical and organisational measures to protect your information. Data submitted through this website is transmitted over encrypted connections (HTTPS). Access to information held by the practice is limited to those who need it to provide your care.

Your rights

Under the UK GDPR, you have the right to:

• Access a copy of your personal information
• Have inaccurate information corrected
• Have your information deleted, where there is no legal reason to retain it
• Restrict or object to processing
• Withdraw consent at any time

To exercise any of these rights, please contact the practice through the contact form.

Complaints

If you have a concern about how we handle your information, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Updates to this policy

We may update this policy from time to time. The “last updated” date above reflects when it was most recently revised.

Contact

If you have any questions about this policy, please contact the practice through the contact form.