Privacy Policy

The data controller for personal information collected through this website is:

When you submit an enquiry through the contact form on this website, we collect the following information:

• First and last name
• Email address
• Phone number (optional)
• Reason for enquiry (selected from a list)
• Your message

We do not ask for or store detailed medical records or sensitive clinical information through this form. We ask patients not to include highly sensitive medical details in their message — the clinic secretary can advise on next steps by phone or email.

We collect your contact details for the sole purpose of responding to your private consultation enquiry and helping you arrange an appointment with Professor Qureshi.

The legal basis for processing your data is consent — you provide this by ticking the consent checkbox on the contact form before submitting. You may withdraw your consent at any time by contacting us using the details above, after which we will no longer process your data for this purpose.

Your enquiry is sent securely by email to Professor Qureshi's private secretary, who will respond to arrange your consultation or answer your initial questions. Your information is not used for marketing, passed to third parties for commercial purposes, or used for any purpose other than responding to your enquiry.

Your data is shared only with the following parties:

• Professor Qureshi's clinic secretary — who handles appointment bookings and enquiry responses on behalf of the practice.
• Resend Inc — our email delivery provider, used to transmit your enquiry securely to the clinic secretary. Resend acts as a data processor on our behalf and operates in compliance with UK GDPR. Your data is not stored by Resend beyond transmission. For more information see resend.com/privacy.

We do not sell, rent or share your personal data with any other third parties.

Enquiry records are retained by the clinic secretary for as long as is necessary to manage your enquiry and, where you become a patient, in line with standard medical records retention requirements under NHS and private practice guidelines (typically a minimum of eight years for adult records).

If your enquiry does not progress to a consultation, records will be deleted within 12 months of your last contact with the clinic.

This website uses two Google services:

• Google Places API — used to display independent patient reviews from Google. This request is made server-side and does not send your personal data to Google.
• Google Maps embed — used to display the location of The Harbour Hospital. When the map loads, Google may set cookies in your browser in accordance with Google's Privacy Policy.

This website does not use tracking or advertising cookies. The only cookies that may be set are those placed by the Google Maps embed (see above), which are subject to Google's own cookie policy. No personal data is collected through cookies on this site.

You have the following rights regarding your personal data:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may ask us to correct inaccurate data.
• Right to erasure — you may ask us to delete your data where there is no longer a lawful reason to retain it.
• Right to restrict processing — you may ask us to limit how we use your data in certain circumstances.
• Right to withdraw consent — you may withdraw your consent at any time, which will not affect the lawfulness of processing carried out before withdrawal.
• Right to complain — you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

To exercise any of these rights, please contact the clinic secretary using the details in section 1.

Enquiry data is transmitted using industry-standard encryption (HTTPS/TLS). Access to enquiry records is restricted to the clinic secretary and Professor Qureshi. We take reasonable technical and organisational steps to protect your personal data from unauthorised access, loss or disclosure.

We may update this privacy policy from time to time. Any changes will be published on this page with an updated date. We encourage you to review this page periodically.