Privacy policy.

Who is responsible for your information

The data controller is Dr Muhammad Umar, registered with the Information Commissioner’s Office (ICO) under registration number ZA549153.

Contact for privacy questions: admin@hipkneesurgeon.uk or 07528 523911.

Using this website

This website does not use analytics, advertising or tracking cookies, and it has no contact forms. Our hosting provider keeps short-term technical server logs, such as IP addresses and the pages requested, to keep the site secure and working. Cookies are only set for site administrators who log in.

Links to Doctify, Top Doctors and hospital websites take you to services with their own privacy notices.

Information we collect when you contact us or become a patient

• Contact details, such as your name, phone number, email and address
• Appointment and administrative details, including referral and insurance information
• Health information you or your clinicians provide, such as symptoms, history, imaging, test results and treatment records

How we use it and our lawful basis

We use your information to arrange and provide your care, communicate with you, and handle billing and insurer authorisation. Under UK GDPR our lawful bases are taking steps at your request before entering into, and performing, a contract with you (Article 6(1)(b)), legal obligations (Article 6(1)(c)) and legitimate interests in running the practice (Article 6(1)(f)). Health information is processed for the provision of health care (Article 9(2)(h)).

Who we share it with

• Medical secretaries who arrange appointments on Mr Umar’s behalf
• The hospital where you are seen, which also keeps its own records as a separate data controller
• Your GP and the clinicians involved in your care
• Your insurer, where your treatment is funded by insurance
• Regulators or other bodies where the law requires it

We do not sell your information or use it for marketing.

How long we keep it

Medical records are kept in line with the Records Management Code of Practice for Health and Social Care. Adult records are usually kept for 8 years after your last treatment. Children’s records are usually kept until their 25th birthday, or 26th if they were 17 when treatment ended.

Your rights

You can ask for a copy of your information, ask us to correct it, or, where it applies, ask us to restrict or delete it or object to its use. To make a request, use the contact details above.

If you are unhappy with how your information has been handled, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.