Introduction

Dr Shilen Patel (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website drshilenpatel.com and use our services as an Oral & Maxillofacial Plastic Surgeon.

We specialize in oral and maxillofacial surgery, cosmetic surgery, skin lesion removals, and reconstructive procedures. As healthcare professionals, we handle sensitive medical information and are bound by strict confidentiality requirements under UK healthcare regulations including GDPR and the Data Protection Act 2018.

By using our website and services, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our website or services.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an appointment or consultation
• Fill out contact forms on our website
• Subscribe to our newsletter or communications
• Contact us via email, phone, or other means
• Participate in surveys or provide feedback

This information may include: full name, email address, telephone number, date of birth, address, medical history, treatment preferences, insurance information, and any other information you choose to provide.

Medical Information

As a healthcare provider specializing in oral and maxillofacial surgery, cosmetic procedures, and skin lesion removals, we collect and maintain medical records including:

• Medical history and current health conditions
• Previous surgeries and treatments
• Medications and allergies
• Clinical photographs and imaging
• Treatment plans and surgical notes
• Post-operative care records

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage patterns, including:

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on pages
• Referring website addresses
• Date and time of visits

How We Use Your Information

We use the information we collect for various purposes, including:

• Providing Healthcare Services: To deliver oral and maxillofacial surgery, cosmetic procedures, skin lesion removals, and related treatments
• Appointment Management: To schedule, confirm, and manage your appointments and consultations
• Communication: To respond to your inquiries, provide treatment information, and send appointment reminders
• Treatment Planning: To assess your needs, develop treatment plans, and coordinate care with other healthcare providers when necessary
• Billing and Administration: To process payments, manage insurance claims, and maintain accurate records
• Legal Compliance: To comply with healthcare regulations, legal obligations, and professional standards
• Quality Improvement: To improve our services, website functionality, and patient experience
• Marketing: To send newsletters, updates, and information about our services (with your consent)

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: You have given explicit consent for us to process your personal information for specific purposes
• Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal Obligation: Processing is necessary to comply with legal and regulatory requirements
• Vital Interests: Processing is necessary to protect your vital interests or those of another person
• Legitimate Interests: Processing is necessary for our legitimate interests in providing quality healthcare services

Information Sharing and Disclosure

We respect your privacy and do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

Healthcare Providers

We may share your medical information with other healthcare professionals involved in your care, including referring dentists, physicians, anesthesiologists, and specialists when necessary for your treatment.

Service Providers

We may share information with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you, including: payment processors, appointment scheduling systems, email service providers, IT support services, and medical imaging facilities.

Legal Requirements

We may disclose your information when required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of our practice, patients, or others.

NHS and Insurance Providers

When applicable, we may share information with NHS trusts, private insurance companies, or other payers to facilitate billing, claims processing, and coordination of care.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data during transmission and storage
• Secure servers and firewalls
• Regular security audits and updates
• Limited access to personal information on a need-to-know basis
• Staff training on data protection and confidentiality
• Secure physical storage of paper records

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to maintain the highest standards of data protection.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and professional obligations.

Medical records are retained in accordance with UK healthcare regulations and professional guidelines, typically for a minimum of 8 years for adults and until the patient’s 25th birthday (or 26th if the patient was 17 at the time of treatment) for patients treated as minors.

When personal information is no longer required, we securely delete or anonymize it in accordance with our data retention policy and legal requirements.

Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018, you have the following rights:

• Right to Access: You can request copies of your personal data and medical records
• Right to Rectification: You can request correction of inaccurate or incomplete information
• Right to Erasure: You can request deletion of your personal data under certain circumstances
• Right to Restrict Processing: You can request limitation of how we use your data
• Right to Data Portability: You can request transfer of your data to another provider
• Right to Object: You can object to processing of your personal data for certain purposes
• Right to Withdraw Consent: You can withdraw consent for data processing at any time

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within one month of receipt.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand user preferences. Cookies are small data files stored on your device.

Types of Cookies We Use

• Essential Cookies: Required for website functionality and security
• Performance Cookies: Help us understand how visitors interact with our website
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect website functionality and your user experience.

Third-Party Links

Our website may contain links to third-party websites, services, or resources that are not operated by us. We have no control over the content, privacy policies, or practices of third-party websites and assume no responsibility for them.

We encourage you to review the privacy policy of any third-party website you visit. This Privacy Policy applies only to information collected through our website and services.

Children’s Privacy

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16 without parental consent.

When we provide treatment to patients under 18, we obtain appropriate consent from parents or legal guardians and handle their information in accordance with UK healthcare regulations and child protection requirements.

If you believe we have collected information from a child without proper consent, please contact us immediately so we can take appropriate action.

International Data Transfers

Your personal information is primarily processed and stored within the United Kingdom. If we transfer your data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Such transfers are only made to countries with adequate data protection laws or under approved transfer mechanisms such as Standard Contractual Clauses.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a new “Last Updated” date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after changes are posted constitutes your acceptance of the updated policy.

For significant changes affecting your rights, we may provide additional notice through email or prominent website notifications.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days. For urgent matters concerning your medical information, please contact us by phone during business hours.