Privacy Policy

We may collect and process the following categories of personal information:
– Identity details: name, date of birth, gender.
– Contact details: address, email, phone number.
– Medical information: information you share about symptoms, diagnosis, treatment history, imaging or reports.
– Insurance details: insurer name, policy/membership number, authorisation details.
– Legal/medicolegal details: information supplied in medicolegal referrals and reports.
– Technical data: IP address, browser type, site usage data (via cookies and analytics, if enabled).

How we collect your data

– Directly from you when you contact us via forms, email, phone or in person.
– From your GP, insurer, solicitor, or hospital when they provide referral details.
– Automatically when you use our website (cookies and analytics — see Cookie Policy).

How we use your data

We process personal data for the following purposes:
– To arrange and deliver clinical consultations, treatment, and follow-up.
– To respond to enquiries (including medicolegal enquiries).
– To process insurance claims and billing.
– To maintain clinical and legal records.
– To improve our website and services (analytics, if enabled).
– To comply with legal or regulatory obligations.

Lawful bases for processing

We rely on the following lawful bases under the UK GDPR:
– Contract – to provide medical services or respond to enquiries.
– Legal obligation – to maintain records required by law or regulators.
– Legitimate interests – for administrative purposes and practice management.
– Consent – where required for optional communications or specific uses.

Sharing your data

We may share your personal data with:
– Hospitals and healthcare providers where you receive treatment.
– Insurers or solicitors, where relevant to your care or medicolegal report.
– Regulatory bodies where legally required.
– Administrative support providers (see below).

Administrative support: Some patient administration and secretarial services are provided by VH Office Services Ltd under contract. They act as a data processor on behalf of Expert Hand Surgery Ltd. They do not act as an independent data controller.

We will not sell your personal data to third parties.

Data retention

– Clinical and medicolegal records: retained in accordance with GMC guidance and statutory requirements (typically a minimum of 7 years, longer for certain surgical/medicolegal cases).
– Website and enquiry data: retained only for as long as necessary to respond to your query and meet any legal obligations.

Your rights

Under the UK GDPR, you have the following rights:
– Access to your data.
– Rectification of inaccurate data.
– Erasure (“right to be forgotten”).
– Restriction of processing.
– Data portability.
– Objection to processing.
– Right to complain to the ICO.

To exercise these rights, contact us at: [email protected]

Cookies and analytics

Our website uses essential cookies to function. In the future, we may also use analytics cookies (e.g. Google Analytics) to monitor site performance. You can manage cookies through our Cookie Consent Banner and read more in our Cookie Policy.

Security

We take appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Expert Hand Surgery Ltd
Email: [email protected]
Phone: 07510 417479

If you remain concerned, you can complain to the Information Commissioner’s Office (ICO): www.ico.org.uk

Last updated 14th October 2025