Privacy Policy

Who we are

The data controller for the private practice is Mr Mohammad Eddama, Consultant Colorectal Surgeon, trading as PrecisionSurgeryME [legal entity to be confirmed, e.g. sole trader or limited company]. Information Commissioner's Office (ICO) registration number: [to be confirmed].

For any question about this notice or your information, contact us by email at [email protected], by phone on +44 7956 699867, or by post at [correspondence address to be confirmed].

Information we collect

When you visit this website

This website does not use analytics, advertising or tracking cookies. Our hosting provider may record standard technical information, such as your IP address and browser type, in server logs for security and to keep the site running.

When you contact us

If you phone or email us, we collect the details you give us: usually your name, email address, phone number and the content of your message. Please do not include detailed medical information in a general enquiry; this can be discussed securely at your consultation.

When you become a patient

To provide your care we collect information such as your contact details, date of birth, GP details, medical history, symptoms, examination findings, test results, treatment records and correspondence, and insurance or payment details where relevant. Information about your health is “special category” data and is given extra protection by law.

How we use your information

• To respond to your enquiry and arrange appointments.
• To assess, diagnose and treat you, and to keep accurate medical records.
• To communicate with your GP, referring clinician and other professionals involved in your care.
• To process payment, including with your insurer if you are insured.
• To meet our legal, regulatory and professional obligations.

We do not sell your information, and we do not use it for marketing without your separate consent.

Our lawful basis

Under the UK General Data Protection Regulation (UK GDPR) we rely on:

• Contract: to take steps at your request before an appointment and to provide the care you have agreed to (Article 6(1)(b)).
• Legal obligation: for example, keeping records required by law (Article 6(1)(c)).
• Legitimate interests: to answer general enquiries and run the practice securely and efficiently (Article 6(1)(f)).
• For health information, the provision of health care by or under the responsibility of a health professional bound by confidentiality (Article 9(2)(h)).

Who we share it with

We only share information where needed for your care or to run the practice:

• Your GP and other clinicians involved in your care, normally with your agreement.
• The private hospital or clinic where you are seen. The hospital is responsible for the records it holds and has its own privacy notice.
• Your medical insurer, if you are using insurance.
• Service providers acting on our behalf, such as email, website hosting and secretarial or billing services, under appropriate data protection terms.
• Regulators, courts or others where the law requires it.

Some of our service providers may store data outside the UK. Where this happens we make sure appropriate safeguards are in place, as required by UK data protection law.

How long we keep it

• Enquiries that do not lead to an appointment: [period to be confirmed, e.g. up to 12 months], then deleted.
• Medical records: in line with the Records Management Code of Practice for Health and Social Care, typically at least 8 years after your last treatment for adults, and longer for children.
• Financial records: as required by tax law, normally 6 years.

Keeping your information secure

We use appropriate technical and organisational measures to protect your information, including access controls and secure systems. Email is not completely secure, so please think carefully before sending sensitive information by email.

Your rights

You have the right to:

• access the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete information, where we are not required to keep it;
• object to or ask us to restrict certain processing;
• ask for your information to be transferred to another provider, where applicable.

To use any of these rights, contact us using the details above. We will respond within one month.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this notice

We may update this notice from time to time. The latest version will always be on this page.