01
Introduction
We protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what data we collect through doctorsukh.com, why we process it, how long we keep it, and your rights.
This website is the online presence of Dr Sukh (Mr Sukhpreet Singh Dubb), Consultant Oral & Maxillofacial / Facial Plastic Surgeon (GMC: 7177175), practising at Cadogan Clinic, Chelsea, London. It provides information about facial procedures and a means to contact the practice.
Pages on other websites that link here have their own controllers and privacy policies. This policy applies only to this website.
03
Lawful basis for processing
For each activity below we rely on an appropriate lawful basis under UK GDPR:
Enquiry forms
Legitimate interests / steps prior to a contract — responding to your request and arranging care or information you have asked for. Where we need your consent (for example optional marketing), we will ask separately.
Website analytics
Legitimate interests — understanding how visitors use the site so we can improve content and usability. Where cookies are non-essential, we will request consent via cookie controls where required.
Security & logs
Legal obligation / legitimate interests — protecting the site and data from abuse, and meeting security obligations.
Where we rely on consent, you may withdraw it at any time by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.
04
What we collect
Information you give us
When you submit the contact or enquiry form, we may collect:
- Name
- Email address
- Telephone number (if provided)
- Preferred location and message content
- Any other fields you choose to complete on the form
Please do not include sensitive medical details in web forms unless necessary; clinical correspondence is usually better handled by phone or through established clinic pathways.
Information collected automatically
When you browse the site, standard technical data may be processed, including:
- IP address (often truncated or pseudonymised in analytics)
- Browser type and device information
- Pages viewed and approximate time on site
- Referring website (if your browser sends it)
This may be collected through cookies and similar technologies — see Cookies below.
05
How we use your data
We use personal data to:
- Respond to enquiries and arrange consultations or information you have requested
- Communicate with you about your request (by email or telephone)
- Maintain records of correspondence where appropriate for the practice
- Improve this website and measure its effectiveness
- Protect the security and integrity of the website
- Comply with legal and regulatory obligations
We do not sell your personal data. We do not use enquiry data for unrelated third-party marketing.
We keep enquiry data only as long as needed for the purposes above, or as required by law, after which it is securely deleted or anonymised. Medical records from a consultation or operation are retained by the treating clinic under their clinical record rules, not by this website.
06
Your rights
Under UK data protection law you have rights including:
- AccessReceive a copy of personal data we hold about you
- RectificationCorrect inaccurate data
- ErasureRequest deletion in certain circumstances
- RestrictionLimit processing in certain circumstances
- ObjectionObject to processing based on legitimate interests
- Data portabilityWhere processing is automated and based on consent or contract
- Withdraw consentWhere processing is based on consent
To exercise any of these rights, contact bookings@doctorsukh.com. We may need to verify your identity before responding. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). Visit ico.org.uk.
07
Security
We implement appropriate technical and organisational measures to protect personal data. This website uses TLS encryption (HTTPS) when you submit forms or browse pages. Access to enquiry data is limited to those who need it for their role.
No transmission over the internet is completely secure; we encourage you to use strong passwords on your own devices and email accounts.
08
Cookies
Cookies are small text files stored on your device. They help the site function, remember preferences, and (with your consent where required) measure how the site is used.
| Type | Purpose |
|---|---|
| Strictly necessary | Security, form protection, WordPress session and preference cookies required for the site to work. |
| Analytics | If analytics tools (for example Google Analytics) are enabled, they provide aggregated statistics on pages visited and general usage. Non-essential analytics cookies will only be set with consent where required. |
This site currently uses essential cookies required for WordPress and form security. We do not use advertising cookies. You can also control cookies through your browser settings.
09
Third-party services
We use trusted providers who process data on our behalf (processors) or provide embedded services. Each has its own privacy policy.
Enquiry forms
Enquiry submissions are handled through Contact Form 7 or WPForms on our WordPress site (or a secure theme fallback form if those plugins are unavailable). Form entries are stored securely on our hosting environment and/or emailed to the practice.
Lawful basis: Legitimate interests / steps prior to contract at your request
Website hosting
Our site runs on WordPress, hosted by our web hosting provider. The host processes server logs (IP address, request time, pages accessed) for security and reliability.
Lawful basis: Legitimate interests / legal obligation (security)
Clinic booking partners
If a clinic needs to complete a booking, relevant contact details may be passed to that clinic for that purpose only. Consultations are typically arranged via Cadogan Clinic in Chelsea, London.
Lawful basis: Legitimate interests / steps prior to contract at your request
Content delivery & security
If we use a CDN or security service such as Cloudflare, it may process IP addresses and request metadata to deliver content quickly and block malicious traffic.
Lawful basis: Legitimate interests / legal obligation (security)
Links to external sites (for example GMC, review platforms or hospital websites) are not covered by this policy.
10
Disclosures
We may disclose personal data where required by law, court order, or to protect the rights and safety of individuals. If we suspect criminal activity we may share relevant information with the appropriate authorities.
We do not routinely share enquiry data with third parties except as described in this policy or with your consent.
11
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Material changes that widen how we use data will apply only to data collected after the updated policy is published, unless we are required or permitted to apply changes retrospectively by law.
12
Contact
For privacy questions or to exercise your rights:
This policy is provided for transparency and does not constitute legal advice. Consider independent legal review if processing activities change.