Privacy Policy
How personal information collected through this website is used.
Draft for legal and data protection review. The lawful bases, retention periods and provider arrangements below are proposed positions and should be approved by a solicitor or data protection adviser before launch.
Who we are
This website presents the private practice of Dr Syed Kashif Hussain Kazmi, Consultant Endocrinologist. The company that operates it, and is the controller of the personal information described here, is:
What this policy covers
This policy covers information you give us through the enquiry form and the booking request form on this website, and technical information handled when you visit it. It does not cover your clinical records if you become a patient.
Information we collect
Enquiry form
Your name, email address, optional telephone number, your appointment preference (Cambridge, virtual or not sure) and your acknowledgement of this policy.
Booking request form
Your name, email address, telephone number, preferred language, appointment type, preferred time of day, optional preferred dates, how you will pay (self funding, insured or not sure), optional insurer name, referral status, confirmation that you are 18 or over, and your acknowledgement of this policy.
Technical information
The website host and any security provider may process technical information such as your IP address, request time and browser details to deliver the site and keep it secure.
What we ask you not to send
Please do not put medical history, symptoms or test results in either form. Even a request for a particular type of specialist can suggest something about your health, so we treat all enquiries as confidential and limit who can see them. If you do include health information, we will use it only to respond to you.
Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Replying to your enquiry or booking request and arranging an appointment | Taking steps at your request before entering a contract (Article 6(1)(b)); for general enquiries, our legitimate interest in answering questions from prospective patients (Article 6(1)(f)). |
| Health information you choose to include in a form, used only to respond to you | Provision of health care or treatment by, or under the responsibility of, a professional bound by confidentiality (Article 9(2)(h) with Schedule 1 of the Data Protection Act 2018). |
| Keeping the website secure and preventing abuse (for example spam protection) | Legitimate interests (Article 6(1)(f)). |
| Measuring how the website is used, only if you accept analytics | Your consent (Article 6(1)(a)). You can withdraw it at any time with “Cookie settings” in the footer. |
| Keeping records we must keep, and dealing with complaints or legal claims | Legal obligation (Article 6(1)(c)) and legitimate interests (Article 6(1)(f)). |
We do not use your information for marketing, and we do not sell it. We do not use advertising pixels. Apart from the optional Google analytics you can accept in the cookie banner and the optional Google map you can choose to load on the Cambridge Clinic page, we do not use cookies or analytics (see the Cookie Policy). Ticking the acknowledgement box confirms you have read this policy; it is not the lawful basis we rely on.
Who receives your information
- Formspree, the form service that receives what you type into our forms and passes it to us. It processes information on our behalf. Its privacy policy says it processes data in the United States and other countries.
- Google, only if you accept analytics in the cookie banner or choose to load the map on the Cambridge Clinic page. For analytics, Google receives your IP address, device details and the pages you visit through Google Tag Manager and Google Analytics, and may set cookies. For the map it receives your IP address and device information. It decides how that information is used under its own privacy policy, and we do not receive it. Google also processes data in the United States and other countries.
- Our email and IT providers, which hold the messages that reach our inbox.
- Our website host, which serves this website.
- Professional advisers, insurers and regulators, only where the law requires it or it is needed to deal with a legal claim.
Transfers outside the UK
Some providers above process information outside the UK, including in the United States. Where they do, the transfer must be covered by an approved safeguard such as the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. We do not promise that your information stays in the UK.
How long we keep it
If you become a patient, clinical records are kept under the applicable records retention guidance for private healthcare.
Your rights
Depending on the circumstances, you have the right to:
- be told how your information is used (this policy);
- access a copy of it;
- have inaccurate information corrected;
- have it erased;
- restrict how we use it;
- object to our use of it where we rely on legitimate interests;
- receive information you gave us in a portable form where it is processed by automated means on the basis of a contract or consent; and
- withdraw consent, where we rely on it, without affecting earlier lawful use.
These rights are not absolute. To use any of them, send a message through the enquiry form. We will reply within one month. There is normally no charge. We may ask you to confirm your identity.
Complaints
If you are unhappy with how we have used your information, please tell us first through the enquiry form, and we will acknowledge your complaint within 30 days and tell you the outcome without undue delay. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to complain to us first.
Automated decisions
We do not make decisions about you using automated processing or profiling. Every request is read and answered by a person.
Children
The clinic sees adults only. The forms ask you to confirm that you are 18 or over, and we do not knowingly collect information from children.
Links to other websites
Links to Top Doctors, maps, the NHS, NICE and other websites open services with their own privacy notices. If you book through Top Doctors, your details go to that service, which is responsible for them, and not through this website’s forms. Read its privacy notice before you share personal or medical information there.
Changes to this policy
We will update this policy when our providers or practices change.