We are pleased to have the opportunity to assist you with your spinal care. Our goal is to provide the highest quality diagnosis and treatment for complex spinal conditions.
This Privacy Policy explains how Dr. Purnajyoti Banerjee (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you use our website.
We are committed to ensuring that your privacy is protected and that your personal data — including any health information you share with us — is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
This privacy policy explains how the private practice of Dr Purnajyoti Banerjee collects and processes personal data through this website, in accordance with UK GDPR and the Data Protection Act 2018. The practice is the data controller for information submitted here.
2. Information We Collect
We may collect and process the following types of personal data:
Name
Email address
Phone number
Preferred clinic and appointment preferences
Information submitted through our appointment request form, including a brief description of your symptoms or reason for visit
Any other information you voluntarily provide
Technical data such as IP address, browser type, and device information
3. Special Category Data (Health Information)
Because our appointment form asks you to briefly describe your symptoms, some of the information you provide may constitute special category data — health information given extra protection under UK GDPR.
We only collect the minimum health information needed to triage and prepare for your appointment. This data is:
Processed on the basis of your explicit consent, given when you tick the consent checkbox and submit the form
Used solely to help the practice team understand your reason for visit and direct you to the appropriate clinic and clinician
Never used for marketing or shared with third parties beyond those directly involved in arranging or delivering your care
You are not required to disclose detailed medical information through the website — a brief description is sufficient, and full medical history is always taken directly by Dr. Banerjee during your consultation.
4. How We Use Your Information
We use your personal data for the following purposes:
To respond to enquiries and appointment requests
To provide medical or professional information and services
To improve our website and user experience
To maintain website security and functionality
To comply with legal and regulatory obligations, including those set by the General Medical Council (GMC)
5. Lawful Basis for Processing
Under UK GDPR, we process your personal data based on one or more of the following lawful grounds:
Your consent
Performance of a contract (arranging and delivering your care)
Compliance with a legal obligation
Legitimate interests, where such interests do not override your rights
Where special category (health) data is involved, we rely specifically on your explicit consent, as set out in Section 3 above.
6. How We Store and Protect Your Data
We take appropriate technical and organisational measures to safeguard your personal data against loss, misuse, unauthorised access, disclosure, or alteration.
Personal data is retained only for as long as necessary to fulfil the purposes outlined in this policy or to meet legal and regulatory requirements — including any minimum retention periods required for clinical records.
7. Sharing Your Information
We do not sell, rent, or trade your personal data.
Your information may only be shared with:
Trusted service providers who assist in operating our website or booking system (under confidentiality agreements)
Other healthcare professionals directly involved in your care, where relevant
Legal or regulatory authorities where required by law
8. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to enhance user experience and analyse website traffic.
You can control or disable cookies through your browser settings. Please note that disabling cookies may affect website functionality.
9. Your Data Protection Rights
Under UK GDPR, you have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure of your data (“right to be forgotten”), subject to our legal obligations around clinical record-keeping
Restrict or object to processing
Request data portability
Withdraw consent at any time, including consent given for the processing of health information
10. Third-Party Links
Our website may contain links to third-party websites, including organisations such as the British Association of Spine Surgeons and the Scoliosis Research Society. We are not responsible for the privacy practices or content of external sites. We recommend reviewing their privacy policies separately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the updated date will be revised accordingly.
12. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact us: