Legal

Privacy Policy

1. Who we are

Professor Tufail Patankar ("the Practice") is a data controller responsible for your personal data in connection with clinical services provided at Queen's Hospital, Romford, London. Our contact address is Queen's Hospital, Rom Valley Way, Romford RM7 0AG.

2. What data we collect

We collect and process the following categories of personal data:

  • Identity data: name, date of birth, GMC number (for referred clinicians)
  • Contact data: address, email address, telephone number
  • Medical data: medical history, imaging, clinical correspondence, treatment records
  • Financial data: payment and insurance details
  • Technical data: IP address, browser type, and pages visited on this website

3. How we use your data

We use your personal data to:

  • Provide clinical consultations, investigations, and procedures
  • Communicate with you about appointments, results, and clinical care
  • Liaise with other healthcare professionals involved in your care
  • Process payments and liaise with your insurer
  • Fulfil our legal and regulatory obligations

4. Legal basis for processing

We process your data under the following legal bases: performance of a contract (provision of medical care), compliance with a legal obligation, and, for special category health data, the provision of health or social care services.

5. Data sharing

We do not sell your personal data. We may share data with: other healthcare professionals involved in your care (with your consent), private medical insurers (for billing purposes), NHS Trusts where joint care is provided, and regulatory bodies where required by law.

6. Data retention

Medical records are retained for a minimum of 8 years from the date of last contact in accordance with NHS guidance, or longer where clinically appropriate. Financial records are retained for 7 years.

7. Your rights

Under UK GDPR, you have the right to: access your personal data, correct inaccurate data, request deletion (subject to legal and clinical obligations), restrict processing, and data portability. To exercise any of these rights, please contact us in writing.

8. Cookies

This website uses essential cookies only, necessary for basic website functionality. No tracking or marketing cookies are used.

9. Contact

For any data protection queries, please contact us via the contact form on our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Last updated: March 2026