{"id":6222,"date":"2025-11-09T10:08:10","date_gmt":"2025-11-09T10:08:10","guid":{"rendered":"https:\/\/israt.dev\/doctor-backup\/?page_id=6222"},"modified":"2025-11-09T11:19:54","modified_gmt":"2025-11-09T11:19:54","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/israt.dev\/doctor-backup\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Introduction<\/h3>\t\t\t\t
\n\t\t\t\t\t

Welcome to the Privacy Policy for the practice of Mr Ijaz Sheikh (referred to as \u201cthe Practice,\u201d \u201cwe,\u201d \u201cus,\u201d or \u201cour\u201d).<\/p>\n

\u200bYour privacy is paramount. We are committed to protecting the personal data you share with us and the sensitive patient data we collect while providing your care. This policy explains how we collect, use, and process your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.<\/p>\n

\u200bBy using our website, completing our forms, or booking an appointment, you acknowledge the terms of this Privacy Policy.<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Who We Are<\/h3>\t\t\t\t
\n\t\t\t\t\t

The Data Controller responsible for your personal data is Mr Ijaz Sheikh and his associated practice.<\/p>\n

\u200bWebsite<\/strong>: www.ijazsheikh.com<\/p>\n

\u200bContact for Data Protection Issues: [Insert Email Address for Data Queries, e.g., DataProtection@israt.dev]<\/p>\n

\u200bAddress<\/strong>: [Insert Practice Address]<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

The Data We Collect About You<\/h3>\t\t\t\t
\n\t\t\t\t\t

We may collect, use, store, and transfer different kinds of personal data, which we have grouped as follows:<\/p>\n

\u200bA. Identity & Contact Data<\/strong><\/p>\n

\u200bIdentity: Full name, date of birth, gender, and marital status.<\/p>\n

\u200bContact: Home address, email address, and telephone number(s).<\/p>\n

\u200bB. Special Category (Health) Data<\/strong><\/p>\n

\u200bThis category includes sensitive personal data that requires greater protection:<\/p>\n

\u200bClinical: Details concerning your medical history, diagnosis, treatment plans, procedure records, test results, and correspondence with other healthcare providers (e.g., GPs or consultants).<\/p>\n

\u200bLifestyle: Information about your smoking\/drinking habits, occupation, and other data relevant to your health.<\/p>\n

\u200bC. Transaction & Financial Data<\/strong><\/p>\n

\u200bDetails about payments to and from you, and other details of services you have purchased from us (we do not store full payment card details).<\/p>\n

\u200bD. Technical Data (Website Only)<\/strong><\/p>\n

\u200bInternet protocol (IP) address, browser type and version, time zone setting, operating system, and information about how you use our website.<\/p>\n

\u200bE. Usage Data<\/strong><\/p>\n

\u200bInformation about how you use our services and website.<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

How Your Personal Data is Collected<\/h3>\t\t\t\t
\n\t\t\t\t\t

We use different methods to collect data from and about you, including:<\/p>\n

\u200bDirect Interactions (Forms & Bookings): You may provide us with your Identity, Contact, and Special Category Data by filling in patient registration forms, online booking forms (if applicable), consent forms, and during consultations.<\/p>\n

\u200bThird Parties or Publicly Available Sources: We may receive personal data about you from third parties, such as:<\/p>\n

\u200bYour GP or referring consultant.<\/p>\n

\u200bHospitals or clinics where your treatment was carried out.<\/p>\n

\u200bMedical or health insurance providers (with your explicit consent).<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

The Legal Basis for Processing Your Data<\/h3>\t\t\t\t
\n\t\t\t\t\t

We only process your personal data when we have a lawful basis to do so under the UK GDPR.<\/p>\n

 <\/p>\n\n\n\n\n\n\n\n\n
Purpose for Processing<\/th>\nType of Data<\/th>\n<\/tr>\n<\/thead>\n
To provide medical care and treatment<\/td>\nIdentity, Contact, Special Category<\/td>\n<\/tr>\n
To communicate about appointments and care<\/td>\nIdentity, Contact<\/td>\n<\/tr>\n
Financial administration (invoicing and payments)<\/td>\nIdentity, Financial<\/td>\n<\/tr>\n
Responding to legal requests (e.g., subpoenas)<\/td>\nAll Data Categories<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Note on Explicit Consent: Where the lawful basis is \"provision of health or social care,\" explicit consent for that data processing is often implied by you seeking our services. However, we will seek your specific and explicit consent for marketing communications (e.g., newsletters) or sharing your data for non-essential purposes.<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

How We Use Your Data<\/h3>\t\t\t\t
\n\t\t\t\t\t

\u200bWe use the data we collect primarily to:<\/p>\n

\u200bProvide Treatment: To administer, manage, and deliver the healthcare services you have requested, including creating and maintaining your clinical record.<\/p>\n

\u200bAdministration: To manage appointments, send reminders, process payments, and maintain accurate practice accounts.<\/p>\n

\u200bCommunication: To correspond with you, your GP, and other necessary specialists regarding your care and referrals.<\/p>\n

\u200bLegal & Regulatory: To comply with our legal, professional, and insurance obligations.<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Sharing Your Data<\/h3>\t\t\t\t
\n\t\t\t\t\t

\u200bWe will not sell or rent your personal data to any third party. We may share your data with the following parties, under strict contractual and confidentiality terms:<\/p>\n

\u200bOther Healthcare Professionals: Your GP, consultants, laboratories, or hospitals, only to ensure continuity and safety of care.<\/p>\n

\u200bIT & System Providers: External companies that host our practice management software and secure electronic patient records (EPR) systems.<\/p>\n

\u200bProfessional Advisers: Accountants, auditors, and legal advisers who assist in the operation of the practice.<\/p>\n

\u200bRegulators & Legal Authorities: Where legally required, such as the Information Commissioner's Office (ICO) or under a court order.<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Data Security & Retention<\/h3>\t\t\t\t
\n\t\t\t\t\t

\u200bA. Data Security<\/strong><\/p>\n

\u200bWe have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. This includes:<\/p>\n

\u200bSecure, password-protected electronic records systems.<\/p>\n

\u200bEncryption where appropriate.<\/p>\n

\u200bStaff training on data protection and confidentiality.<\/p>\n

\u200bB. Data Retention<\/strong><\/p>\n

\u200bWe will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or professional requirements.<\/p>\n

\u200bFor patient medical records, we adhere to professional and regulatory guidelines regarding retention periods. For example, clinical records for adults are typically retained for [Insert UK Standard Retention Period, e.g., 8 years] after the last contact or treatment, or longer for minors and certain complex cases.<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Your Legal Rights (The Data Subject Rights)<\/h3>\t\t\t\t
\n\t\t\t\t\t

\u200bUnder the UK GDPR, you have the following rights regarding your personal data:<\/p>\n

\u200bThe Right to Be Informed: To be informed about how your data is used (which this policy achieves).<\/p>\n

\u200bThe Right of Access: To request a copy of the personal data we hold about you (a Subject Access Request or SAR).<\/p>\n

\u200bThe Right to Rectification: To have incomplete or inaccurate data corrected.<\/p>\n

\u200bThe Right to Erasure ('Right to be Forgotten'): To ask us to delete or remove personal data where there is no good reason for us to continue processing it. Note: We are required to retain medical records for specific legal periods.<\/p>\n

\u200bThe Right to Restrict Processing: To ask us to suspend the processing of your personal data in certain scenarios.<\/p>\n

\u200bThe Right to Data Portability: To request the transfer of your data to you or a third party in a structured, commonly used, machine-readable format.<\/p>\n

\u200bThe Right to Object: To object to processing based on legitimate interests.<\/p>\n

\u200bRights in Relation to Automated Decision Making and Profiling: We do not currently use automated decision-making or profiling in a way that produces legal effects concerning you.<\/p>\n

\u200bTo exercise any of these rights, please contact the Data Protection point of contact listed in Section 2.<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

How to Complain<\/h3>\t\t\t\t
\n\t\t\t\t\t

\u200bIf you have any concerns about our use of your personal data, please contact us in the first instance so we can try to resolve the issue for you.<\/p>\n

\u200bYou also have the right to lodge a complaint with the UK supervisory authority for data protection matters:<\/p>\n

\u200bThe Information Commissioner\u2019s Office (ICO)<\/p>\n

\u200bAddress:<\/strong> Wycliffe House, Water Ln, Wilmslow SK9 5AF<\/p>\n

\u200bWebsite:<\/strong> https:\/\/ico.org.uk\/<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Changes to This Privacy Policy<\/h3>\t\t\t\t
\n\t\t\t\t\t

\u200bWe keep our Privacy Policy under regular review. Any changes will be posted on this page and, where appropriate, notified to you by email.<\/p>\n

\u200bThis Privacy Policy was last updated on: [Insert Date]<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Privacy Policy Introduction Welcome to the Privacy Policy for the practice of Mr Ijaz Sheikh (referred to as \u201cthe Practice,\u201d \u201cwe,\u201d \u201cus,\u201d or \u201cour\u201d). \u200bYour privacy is paramount. We are committed to protecting the personal data you share with us and the sensitive patient data we collect while providing your care. This policy explains how we collect, use, and process your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. \u200bBy using our website, completing our forms, or booking an appointment, you acknowledge the terms of this Privacy Policy. Who We Are The Data Controller responsible for your personal data is Mr Ijaz Sheikh and his associated practice. \u200bWebsite: www.ijazsheikh.com \u200bContact for Data Protection Issues: [Insert Email Address for Data Queries, e.g., DataProtection@israt.dev] \u200bAddress: [Insert Practice Address] The Data We Collect About You We may collect, use, store, and transfer different kinds of personal data, which we have grouped as follows: \u200bA. Identity & Contact Data \u200bIdentity: Full name, date of birth, gender, and marital status. \u200bContact: Home address, email address, and telephone number(s). \u200bB. Special Category (Health) Data \u200bThis category includes sensitive personal data that requires greater protection: \u200bClinical: Details concerning your medical history, diagnosis, treatment plans, procedure records, test results, and correspondence with other healthcare providers (e.g., GPs or consultants). \u200bLifestyle: Information about your smoking\/drinking habits, occupation, and other data relevant to your health. \u200bC. Transaction & Financial Data \u200bDetails about payments to and from you, and other details of services you have purchased from us (we do not store full payment card details). \u200bD. Technical Data (Website Only) \u200bInternet protocol (IP) address, browser type and version, time zone setting, operating system, and information about how you use our website. \u200bE. Usage Data \u200bInformation about how you use our services and website. How Your Personal Data is Collected We use different methods to collect data from and about you, including: \u200bDirect Interactions (Forms & Bookings): You may provide us with your Identity, Contact, and Special Category Data by filling in patient registration forms, online booking forms (if applicable), consent forms, and during consultations. \u200bThird Parties or Publicly Available Sources: We may receive personal data about you from third parties, such as: \u200bYour GP or referring consultant. \u200bHospitals or clinics where your treatment was carried out. \u200bMedical or health insurance providers (with your explicit consent). The Legal Basis for Processing Your Data We only process your personal data when we have a lawful basis to do so under the UK GDPR.   Purpose for Processing Type of Data To provide medical care and treatment Identity, Contact, Special Category To communicate about appointments and care Identity, Contact Financial administration (invoicing and payments) Identity, Financial Responding to legal requests (e.g., subpoenas) All Data Categories Note on Explicit Consent: Where the lawful basis is “provision of health or social care,” explicit consent for that data processing is often implied by you seeking our services. However, we will seek your specific and explicit consent for marketing communications (e.g., newsletters) or sharing your data for non-essential purposes. How We Use Your Data \u200bWe use the data we collect primarily to: \u200bProvide Treatment: To administer, manage, and deliver the healthcare services you have requested, including creating and maintaining your clinical record. \u200bAdministration: To manage appointments, send reminders, process payments, and maintain accurate practice accounts. \u200bCommunication: To correspond with you, your GP, and other necessary specialists regarding your care and referrals. \u200bLegal & Regulatory: To comply with our legal, professional, and insurance obligations. Sharing Your Data \u200bWe will not sell or rent your personal data to any third party. We may share your data with the following parties, under strict contractual and confidentiality terms: \u200bOther Healthcare Professionals: Your GP, consultants, laboratories, or hospitals, only to ensure continuity and safety of care. \u200bIT & System Providers: External companies that host our practice management software and secure electronic patient records (EPR) systems. \u200bProfessional Advisers: Accountants, auditors, and legal advisers who assist in the operation of the practice. \u200bRegulators & Legal Authorities: Where legally required, such as the Information Commissioner’s Office (ICO) or under a court order. Data Security & Retention \u200bA. Data Security \u200bWe have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. This includes: \u200bSecure, password-protected electronic records systems. \u200bEncryption where appropriate. \u200bStaff training on data protection and confidentiality. \u200bB. Data Retention \u200bWe will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or professional requirements. \u200bFor patient medical records, we adhere to professional and regulatory guidelines regarding retention periods. For example, clinical records for adults are typically retained for [Insert UK Standard Retention Period, e.g., 8 years] after the last contact or treatment, or longer for minors and certain complex cases. Your Legal Rights (The Data Subject Rights) \u200bUnder the UK GDPR, you have the following rights regarding your personal data: \u200bThe Right to Be Informed: To be informed about how your data is used (which this policy achieves). \u200bThe Right of Access: To request a copy of the personal data we hold about you (a Subject Access Request or SAR). \u200bThe Right to Rectification: To have incomplete or inaccurate data corrected. \u200bThe Right to Erasure (‘Right to be Forgotten’): To ask us to delete or remove personal data where there is no good reason for us to continue processing it. Note: We are required to retain medical records for specific legal periods. \u200bThe Right to Restrict Processing: To ask us to suspend the processing of your personal data in certain scenarios. \u200bThe Right to Data Portability: To request the transfer of your data to you or a third party in a structured, commonly used, machine-readable format. \u200bThe Right to Object: To object to processing based on legitimate interests. \u200bRights in Relation to Automated Decision Making and Profiling: We do not currently<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-6222","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/israt.dev\/doctor-backup\/wp-json\/wp\/v2\/pages\/6222","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/israt.dev\/doctor-backup\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/israt.dev\/doctor-backup\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/israt.dev\/doctor-backup\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/israt.dev\/doctor-backup\/wp-json\/wp\/v2\/comments?post=6222"}],"version-history":[{"count":0,"href":"https:\/\/israt.dev\/doctor-backup\/wp-json\/wp\/v2\/pages\/6222\/revisions"}],"wp:attachment":[{"href":"https:\/\/israt.dev\/doctor-backup\/wp-json\/wp\/v2\/media?parent=6222"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}