Legal
How the practice collects, uses and protects your personal information. Written to be easy to read; last reviewed September 2026.
Ms Abha Gupta, Consultant Ophthalmic Surgeon, is the data controller for information collected through this website and in the course of your private care. The practice is registered with the Information Commissioner’s Office.
Through the website: your name, phone number, email address, preferred clinic and date, how you intend to pay, and a short description of your concern.
In clinic: your medical history, examination findings, scans and images, correspondence with your GP and optometrist, and billing and insurance details.
To arrange and provide your care: provision of healthcare (UK GDPR Article 9(2)(h)) and our contract with you
To write to your GP, optometrist or referrer: provision of healthcare, with your knowledge
To invoice you or your insurer: contract and legitimate interests
To meet professional and legal duties, including GMC record-keeping standards and PHIN reporting: legal obligation
To reply to website enquiries: legitimate interests, and consent where you tick the box
Your GP and referring optometrist, the hospital where you are seen, your insurer if you are insured, laboratories and imaging providers involved in your care, and our secure IT and practice-management suppliers who act only on our instructions. We never sell your information.
Clinical records are retained in line with NHS and Royal College guidance, normally for at least eight years after your last contact. Website enquiries that do not lead to an appointment are deleted after twelve months.
Access a copy of the information we hold about you
Ask for inaccurate information to be corrected
Ask us to delete information where there is no lawful reason to keep it
Object to processing, or ask for it to be restricted
Withdraw consent where consent is the basis
Complain to the Information Commissioner’s Office, ico.org.uk
Security
Records are held on encrypted, access-controlled systems within the UK. Website forms are sent over HTTPS. Please do not include detailed medical history in the enquiry form.
Related