Privacy notice

This website is run by Mr Simon Jameson, consultant trauma and orthopaedic surgeon (GMC 6055992). In this notice, "we", "us" and "our" mean Mr Jameson and his private practice.

Mr Jameson is the controller of the personal information described here, which means he decides how it is used and is responsible for protecting it under UK data protection law. You can contact us about anything in this notice using the enquiry form.

This notice covers this website and private enquiries only. If you are seen as an NHS patient at University Hospitals Tees, the Trust's own privacy notice applies to that care. If you are seen at Woodlands Hospital, the hospital's own privacy notice also applies to your treatment there.

When you send an enquiry, we collect:

• your name and email address
• your telephone number, if you choose to give it
• the area of treatment you are interested in
• anything you write in your message

The area of treatment and your message are likely to include information about your health. The law treats health information as "special category" data and gives it extra protection, and we treat it with the same confidentiality as any medical information.

When you visit the site, our web server also keeps standard technical logs, such as your IP address, browser type and the pages requested. We use these only to keep the website secure and working.

We use the information in your enquiry to reply to you, to decide with you whether a consultation is appropriate and, if you want one, to arrange it. We do not use it for marketing and we never sell it.

Data protection law requires us to have a legal basis for using your information:

• Your enquiry: we are taking steps you have asked for before you decide whether to book a private consultation (UK GDPR Article 6(1)(b)).
• Your health information: your explicit consent, which you give by ticking the consent box on the enquiry form (UK GDPR Article 9(2)(a)).
• Website logs: our legitimate interest in keeping the website secure (UK GDPR Article 6(1)(f)).

You can withdraw your consent at any time by contacting us. This will not affect anything we did with your information before you withdrew it.

Your enquiry is sent by email to Mr Jameson's practice and is read only by Mr Jameson and people who support his practice, all of whom are bound by confidentiality.

We use trusted service providers to host this website, deliver email and maintain the site. They handle your information only on our instructions, under written contracts that require them to keep it secure and confidential.

If you go on to become a patient, relevant information will be shared with the hospital where you are treated and others directly involved in your care, in line with the confidentiality rules that apply to all doctors.

Some of our providers may process information outside the UK. When they do, we make sure it is protected by safeguards recognised in UK law, such as a UK adequacy decision or the ICO's International Data Transfer Agreement.

If your enquiry does not lead to an appointment, we delete it within 12 months of our last contact with you.

If you become a patient, your enquiry becomes part of your medical record and is kept for as long as professional guidance on medical records requires.

Website logs are kept for a short period and then deleted automatically.

The website is served over an encrypted connection, and access to enquiries is limited to the people who need it.

No online system is completely secure, so please keep your enquiry brief. There is no need to send detailed medical records, your NHS number or your date of birth. We will ask for what we need if you go ahead with a consultation.

This website sets only two cookies, both of which it needs to work:

• A session cookie that keeps the enquiry form working while you fill it in.
• XSRF-TOKEN, a security cookie that stops other websites submitting forms on your behalf.

Both expire two hours after your last visit. We do not use analytics, advertising or tracking cookies.

You have the right to:

• ask for a copy of the information we hold about you
• ask us to correct information that is wrong or incomplete
• ask us to delete your information, or to restrict how we use it
• object to how we use your information
• ask for your information in a format you can take elsewhere
• withdraw your consent at any time

To use any of these rights, contact us through the enquiry form. We will reply within one month. Some rights have legal limits, for example where we must keep medical records, and we will explain if one applies.

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right.

You can also complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113.

We may update this notice from time to time. The date at the top shows when it was last changed.