Privacy Policy

This Privacy Policy was last updated: 6^th March 2019

Use of the website, www.nosesurgeon.co.uk, constitutes a legal agreement to the terms within this policy and your acceptance of this policy is deemed to occur upon your first use of the website. If you do not agree with the terms below, you are advised not to use the website.

This policy may change from time to time and you should check this page before using the website to ensure that you are aware of and accept any changes.

Policy Statement

The website www.nosesurgeon.co.uk is designed to promote the services of Consultant Ear Nose and Throat Surgeon, Mr. Henry Sharp FRCS (England), FRCS (ORL-HNS). We understand that your privacy is important to you and that you care about how your personal data is used and shared online. This privacy policy sets out how www.nosesurgeon.co.uk collects and processes personal data. 

Where applicable terms used in this policy shall have the meanings given by the Data Protection Act 2018 and General Data Protection Regulation (GDPR).

We will take all reasonable steps to ensure that personal data is safeguarded and kept in accordance with the law.

By providing us with your data, you warrant that you are over 13 years of age.

About Us

Our office address is Dover Street Doctors LLP, FDS House, 97a Harvey Drive, John Wilson Business Park, Chestfield, Whitstable, Kent CT5 3QZ.

Where we manage personal data, we identify as a Data Controller and recognise and act on our obligations under applicable data protection laws. For any issues relating to data protection the person responsible is Mr Henry Sharp.

Personal Data We Collect

Information that you provide to us is retained and processed in accordance with UK data protection legislation. This includes data given to us from the following:

Communications

We collect personal data when users submit an online Patient Referral Form. This collects your name, date of birth, address, email and contact number as well as GP details and your description of the problem you wish to enquire about. We will use this information to contact you and provide details of our services, make bookings, confirm bookings and deal with general company enquiries. Data is held on the grounds of being legitimate to our business interests.

We also collect personal data when our online GP Referral Form is submitted and this includes data relating to: GP’s name, GP’s contact telephone number, patient’s name, date of birth, contact email and telephone number.

We retain copies of emails sent to us on our servers which are hosted on by Hosting UK. For details of how your data is handled by this third party you should refer to their Privacy Policy at https://www.unitedhosting.co.uk/about/privacy-policy. Your personal data will be held by us in accordance with this Privacy Policy and will be on the basis of being legitimate to our business interests. Emails sent to us, including any attachments, may be monitored and blocked if the contents are considered a potential threat to the business or our systems or if deemed illegal.

Phone calls to us may be recorded and any data relating to the call may be retained by us. The data will be held on the basis of being for our legitimate business needs or in order to fulfil our contractual obligations if you are a client of ours. Calls may be tracked and data anonymized for analytical purposes.

Use of the website

When you visit the website, www.nosesurgeon.co.uk we will log your Internet Protocol (IP) address, and the type of web browser used. This is not used to identify you as an individual user by us and we will not collect any personal data until you specifically provide this to us. Anonymised data may be used and share for analytical purposes (see Cookie Policy below).

Testimonials

We may ask clients for a testimonial in relation to our services or treatments and this may be used on our website. Personal data that identifies an individual will not be published online or in any printed material.

Special Categories Of Data

Some of the information you provide to us may be considered as special categories of data and this includes any information provided in relation to: ethnic or racial origin, political opinions, religious beliefs, trade union membership, physical or mental health, sexual life or criminal record. We take additional measures to ensure that all such data is processed securely and safeguarded at all times.

Children

We do not market this website at those under 18 years old. Consistent with the GDPR we will never knowingly request personally identifiable information from anyone under the age of 16 years old.

We will take appropriate steps to delete any personal data of individuals less than 16 years of age that has been collected on our website upon learning of the existence of such data.

Information We Get From Other Sources

From time to time, we may need to obtain information from third parties about you. This will only apply where it is necessary to provide our services and as permitted by law. 

How Do We Use Your Data

We may use the information we collect from you in the following ways:

• To administer and improve the website;
• To personalise the content and your experience of the website;
  • To allow us to respond to communications sent to us;
  • To confirm treatment/specialist availability;
  • To confirm a treatment price quotation;
  • To book a consultation;
  • To send you email notifications which you have specifically requested;
  • To provide third parties with statistical information about our users;
  • To ask for feedback or testimonials;
  • To deal with enquiries and complaints made by or about you relating to the website.

Users contacting this website and/or its owners do so at their own discretion and provide any such personal details requested at their own risk. Your personal data is kept private and stored securely until a time it is no longer required or has no use.

Sharing Information

Disclosure

We don’t share, sell, or distribute your data to third parties, except as contractually agreed with you or as provided in this Privacy Policy. We may disclose your personal data if we are required to do so by law, in connection with any legal proceedings, and in order to establish, exercise or defend our legal rights, or if otherwise legally permitted.

Other Healthcare Professionals And staff

Personal data submitted via www.nosesurgeon.co.uk, provided by telephone or in-person may be shared with healthcare consultants working with Mr Henry Sharp who also provide treatments at the practice. All such information is treated as confidential and appropriate steps taken to ensure it is appropriately safeguarded.

Administrative staff may only access personal data if it is required for their role and are also under a duty to maintain confidentiality. 

Data Processors

We may use Data Processors who act on our instruction in relation to the management of your data and they must adhere to all data protection laws and regulations. We will ensure that any Data Processors used only operate on our written instructions and comply with their obligations under the GDPR. You will be informed of any other Data Controllers who have access to your data and who may determine processing activities separately to us, or as a Joint Data Controller. 

Marketing

We will only send you emails about our services with your express consent. You have the option not to give consent and to withdraw consent at any time. You may withdraw your consent for us to contact you by emailing henry@nosesurgeon.co.uk. Non-personally identifiable visitor information may be provided to third parties for marketing, advertising or other uses.

External Links

Users of the website are advised to adopt a policy of caution before clicking on any external web links. Clicking an external link will take the user away from our website. Once you leave our website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy. You encourage you to read the website privacy policy for any third party you click on to.

www.nosesurgeon.co.uk cannot guarantee or verify the contents of any externally linked website and users click on external links at their own risk. www.nosesurgeon.co.uk and its owner cannot be held liable for any damages, or the consequences of visiting any external links.

Payment Processing

This website does not process payments. Payments handled on our premises shall comply with the standard procedures and requirements as laid down by law to ensure that personal data is kept secure.

Data Retention

We keep your personal data in accordance with our Data Retention Policy which reflects our needs to provide services to you as contracted and also as required to meet legal, statutory and regulatory obligations. The need to hold information is regularly reviewed and data will be disposed of when no longer required.

Personal data from enquiry forms submitted to us shall be kept for a period of 12 months from when the enquiry is closed.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Personal data is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep such information confidential.

We take appropriate steps to ensure a safe processing of personal data, however, we cannot guarantee the security of data transmitted through our website or by email.  Any transmission is at your own risk.

Data Storage

Our website is hosted by Hosting UK. Any information that you supply to us may be stored and processed by their servers located in the UK. You can refer to their Privacy Policy at https://www.unitedhosting.co.uk/about/privacy-policy. Your data may be transferred in accordance with the relevant data protection law.

Rights Of Data Subjects 

We recognise a data subjects rights and will uphold these in accordance with data protection law. You should note that in some cases, we may limit or restrict the enforcement of these rights due to our legal or regulatory obligations.

You are entitled to see the information held about you and you may ask us about any of the following:

Subject Access requests

Data subjects (i.e. individuals) have the right to access personal data that is held by us by submitting a subject access request (SAR)]. We will endeavour to respond quickly to any such requests, which legally require us to respond within one month of receiving the request and necessary information. A subject access request can be made by emailing henry@nosesurgeon.co.uk

Right To Rectification

Data subjects have the right to request that we amend or change personal data that is inaccurate or incorrect.

Right to Erasure

Data subjects have the right to ask us to delete personal data from our systems without giving any reason and at any time. We will act on any such request without delay. This right is not absolute and personal data may be retained for us where there is a lawful reason for us to do so and this takes precedence over the right of erasure.

Right To Restrict Processing

Data subjects have the right to rectification or erasure of personal data in the following circumstances:

• Personal data is not accurate;
• The processing of data is unlawful – data subjects may request that processing is restricted;
• Data is required to exercise legal rights or defend legal claims;
• Data is unlawful but there may be lawful grounds for processing, which override this right.

Right To Data Portability

Data subjects have the right to obtain and request the transfer of their data to different service providers.

Right To Object

Data subjects have the right to object to the processing of data at any time based on their particular situation. This includes objecting to profiling unless it is in the ‘public interest’ or exercised lawfully by an official authority. We will only process data under lawful grounds.

Right Not To Be Subject To Decisions Based On Automated Processing

We do not use any automated processing that results in any automated decision based on a data subject’s personal data.

Using Your Rights

If you wish to invoke any of these rights, you should contact the person responsible for data protection by emailing us at henry@nosesurgeon.co.uk

Data Breaches

We will report any unlawful breach of data as required by the GDPR within 72 hours of the breach occurring, if it is considered that there is an actual, or possibility, that data within our control including the control of our data processors, has been compromised. If the breach is classified as ‘high risk’ we will notify all data subjects concerned using an appropriate means of communication. We will report any relevant breaches to the ICO, see below.

COOKIES POLICY

What Are Cookies

Cookies are small files saved to the user’s computer hard drive that track, save and store information about the user’s interactions and usage of the website. This allows the website to provide the user with a tailored experience when navigating the website. Session cookies may be used to validate access to different parts of the website.

Disabling Cookies

If you are uncomfortable with the use of cookies, you can disable cookies on your device by changing the settings in the preferences or options menu in your browser.  You can set your browser to reject or block cookies or to tell you when a website tries to put a cookie on your device. You can also delete any cookies that are already stored on your device.  However, please be aware that if you do delete and block all cookies from our website, parts of the site may not fully function.

How We Use Cookies

www.nosesurgeon.co.uk uses cookies to help us identify and track visitors, their usage of the website, and their website access preferences. Cookies are a user’s identification card for accessing the servers. On a user’s first visit to the website a Cookie Pop up will ask a user to allow or disallow the use of cookies on their computer or device. This complies with UK legislation which requires that explicit consent is given by users before reading files are left, or applied, on a user’s computer or device. To the extent that cookies data constitutes personally identifiable information, we process such data on the basis of your consent.

Types Of Cookies

The types of Cookies we use are:

• Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
• Statistics cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

Cookies can be placed for a user’s session or will be persistent. See the below table for retention periods.

Cookies We Use

COOKIE	PROVIDER	TYPE	USE	RETENTION PERIOD
NECESSARY
PHPSESSID	nosesurgeon.co.uk	HTTP	Preserves users’ session state across page requests	6 days
STATISTICS
_ga	nosesurgeon.co.uk	HTTP	Statistical data on how user uses the website	2 years
_gat	nosesurgeon.co.uk	HTTP	Google Analytics use to throttle request rate	1 day
_gid	nosesurgeon.co.uk	HTTP	Registers unique ID for statistics on website use	1 day
collect	Google-analytics.com	Pixel	Sends data to Google about user’s device & behaviour	Session

 

Analytics

www.nosesurgeon.co.uk uses tracking software provided by Google Analytics to monitor its visitors, and to better understand how they use the site. See above table. The software will save a cookie to the user’s hard drive in order to track and monitor engagement and usage of the website. The cookie will not store, save or collect personal data. The data collected is only viewable by selected employees on a need-to-know basis and by Google.

Google’s privacy policy is available at http://www.google.com/privacy.html. Users may opt-out from having their data collected by disabling the tracking.

Consent To Cookies

If you accept the use of Cookies on this website, you consent to the processing of data about you by us and any third parties as identified above in accordance with this policy and our Privacy Policy. You have the right to withdraw your consent at any time by emailing henry@nosesurgeon.co.uk

Further Information

Guidelines for the processing and handling of data and use of Cookies is available from the Information Commissioner’s Office, the UK supervisory authority on data protection, see www.ico.org.uk.

Information is also available at www.ec.europa.eu/ipg/basics/legal/cookies/index_en.html

Important Information

Questions And Queries

If you have any concerns about how we handle your data, you can contact us by email to henry@nosesurgeon.co.uk

Changes To This Policy

We reserve the right to change this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website.

You will be deemed to have accepted any changes to the terms of the privacy policy on your next visit of the website following the amendment.

Complaints

If you want to raise a concern about the use of your data, you can contact us by email to henry@nosesurgeon.co.uk. Alternatively, you can formally raise a concern or complaint to the Information Commissioner’s Office (ICO) directly on 0303 123 1113, or see the options for reporting issues on https://ico.org.uk/concerns/

No Waiver

No failure or delay by us in exercising any of our rights in accordance with this Privacy Policy or our terms and conditions shall be deemed to be a waiver of that right, and no waiver of a breach of any provision of the Agreement shall be deemed to be a waiver of any subsequent breach of the same or any other provision.

Severance

If one or more of the provisions of this Privacy Policy or our terms and conditions is found to be unlawful, invalid or otherwise unenforceable, those provision(s) shall be deemed severed from the remainder of these terms and conditions and shall remain enforceable.

Third Party Rights

The terms of this Privacy Policy shall not confer rights on any third parties and accordingly the Contracts (Rights of Third Parties) Act shall not apply.

Jurisdiction And Governing Law

The terms of this Privacy Policy and all disputes, whether contractual or otherwise, arising out of or in connection with the policy are governed by and shall be construed in accordance with the laws of England and Wales and each party submits to the exclusive jurisdiction of the English courts.

 

Copyright © 2019 Mr. Henry Sharp | www.nosesurgeon.co.uk  

Latest News & Views