1. Who We Are

This privacy notice explains how TW Foot Surgeon (“we”, “our”, “us”) collects, uses, and protects your personal information.

• Website: www.twfootsurgeon.co.uk
• Phone: 07597 486533
• Email: secretary@twfootsurgeon.co.uk
• Address: 120 Mile End Rd, Mile End, Colchester, CO4 5XR

2. What Data We Collect

We may collect and process the following personal information:

• Contact information: name, email address, phone number.
• Medical or health-related details: only where voluntarily provided in an enquiry form or consultation request.
• Administrative details: insurance or GP information where relevant to your enquiry.
• Technical information: such as your IP address, browser type, and site usage data via cookies/analytics.

3. How We Use Your Data

We use your personal data to:

• Respond to enquiries and appointment requests.
• Provide medical care and related administration.
• Manage billing and insurance queries.
• Improve our website and patient experience.
• Comply with legal and regulatory obligations.

4. Legal Basis for Processing

We process your personal data under the following UK GDPR grounds:

• Consent – when you provide information via our forms.
• Legitimate interests – for analytics, spam prevention, and business administration.
• Legal obligation – to maintain medical records as required by law.

5. Cookies & Analytics

Our website may use cookies and similar technologies to improve functionality and analyse traffic.
We may also embed third-party services (e.g., Google Maps, YouTube) which can set their own cookies.

You can control or disable cookies through your browser settings.

6. Sharing Your Data

We do not sell your data to third parties. We may share your information with:

• Medical insurers or healthcare providers (with your consent, where relevant).
• Service providers such as website hosting or form providers (e.g., Jotform).
• Regulators or legal authorities if required by law.

Where data is transferred outside the UK (e.g. if a service provider hosts data abroad), appropriate safeguards will be applied.

7. How Long We Keep Your Data

• Enquiry data: normally kept for up to 12 months.
• Patient medical records: retained in accordance with professional and legal requirements for medical documentation.
• Analytics and technical logs: typically retained for up to 26 months.

8. Your Rights

Under UK data protection law, you have the right to:

• Request access to the personal data we hold about you.
• Ask us to correct or update inaccurate information.
• Request erasure of your personal data (subject to legal obligations).
• Withdraw consent at any time (where processing is based on consent).
• Object to or restrict processing in certain circumstances.
• Request transfer of your personal data to another provider.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data: https://ico.org.uk/make-a-complaint/

9. Security of Your Data

We take appropriate technical and organisational measures to protect your personal information, including the use of secure servers, encryption where appropriate, and restricted access controls.

10. Updates to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on our website with the date shown at the top of this page.