0115 684 8929 Request a call back

Privacy notice

Draft — not yet reviewed. This page was written as a starting point for a solicitor, not as finished legal text. It has not been reviewed by anyone qualified to review it, and it should not be relied on as it stands. It must be checked and signed off before the site takes a payment or accepts an enquiry.

The short version

If you fill in a form on this site, or buy a guide, you give us information about yourself. Some of it is information about your health. This page explains what happens to it.

Health information needs special treatment

Most personal data — a name, an email address — is ordinary personal data. Information about your health is not. Under Article 9 of the UK GDPR it is special category data, and it may only be processed on a narrower set of grounds with additional safeguards.

This site collects it in two ways, and the second is less obvious than the first:

  • Directly. The message box on the contact form invites you to describe your symptoms. Whatever you write there is health information.
  • By inference. Downloading a guide about prolapse implies something about your health just as clearly as writing it down would. A record saying that a named person downloaded that guide is health data about that person.

The second point shapes how this site is built. Download links carry a one-way hash rather than your email address, order records are keyed by that hash, and the mailing list is tagged generically — it is never told which guide you bought, or which condition you asked about. What you purchased is held by Stripe, which needs it to process the payment.

Lawful basis

{{ TODO: needs sign-off — confirm the Article 6 basis and, separately, the Article 9 condition. The likely pairing for enquiries is Article 6(1)(a) consent with Article 9(2)(h), provision of health care by a professional bound by professional secrecy. For guide sales it is Article 6(1)(b), performance of a contract. This must be confirmed by someone qualified, not assumed. }}

Who sees it

{{ TODO: needs sign-off — name the roles with access, and confirm that enquiry submissions do not land in a personal inbox. MIGRATION-NOTES flags this as unresolved and it is a launch blocker. }}

These processors are used:

  • Stripe — payment processing.
  • Cloudflare — hosting, and storage of the guide files.
  • Resend — sending download emails.
  • {{ TODO: confirm the mailing list provider and its data-processing terms }}

How long it is kept

{{ TODO: needs sign-off — a stated retention period for enquiry messages, for order records, and for mailing-list entries. 'Indefinitely' is not an acceptable answer for health data. }}

Your rights

You can ask what is held about you, ask for it to be corrected, ask for it to be deleted, withdraw consent, or object to it being used. Write to care@morgangynaecology.co.uk.

If you are not satisfied with the response you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

{{ TODO: needs sign-off — confirm what is actually set. At the time of writing the site sets no analytics or advertising cookies; if any are added, this section and a consent mechanism are both required. }}

Mr George Morgan is registered with the General Medical Council.