Who we are
Medicex is the private medical consultancy of Dr Kajal Babamiri. For the purposes of UK data protection law, the data controller is [TO CONFIRM: registered legal entity name and company number, or "Dr Kajal Babamiri" as a sole practitioner].
Registered address: [TO CONFIRM]
ICO registration number: [TO CONFIRM — controllers processing health data must
normally register with the Information Commissioner's Office]
Data protection contact: info@medicex.com
What we collect
When you submit the enquiry form, we collect:
- Your name, email address and telephone number
- The nature of your enquiry and your preferred method of contact
- The content of your message — which may include information about your health
- Technical information: your IP address, the page you enquired from, and a timestamp
Information about your health is special category data under UK GDPR and attracts additional protection. Please do not send clinical detail you would not be comfortable sending by ordinary email.
Why we use it, and our lawful basis
- To respond to your enquiry — our legitimate interests in dealing with people who contact us, and taking steps at your request prior to entering a contract.
- Where your enquiry contains health information — Article 9(2)(h) UK GDPR, processing necessary for the provision of health care by, or under the responsibility of, a health professional bound by a duty of confidentiality.
- Analytics — your consent, which you give or refuse through the cookie banner and may withdraw at any time.
Who we share it with
Enquiries are delivered to our team by email and are also transferred to HighLevel (HighLevel Inc.), the customer relationship management platform we use to manage enquiries and appointments. HighLevel acts as our processor under a written agreement.
HighLevel stores data in the United States. Transfers outside the UK are made under [TO CONFIRM: the UK International Data Transfer Addendum, or the UK Extension to the EU-US Data Privacy Framework — confirm which mechanism applies to your HighLevel contract].
We also use Google Analytics 4 (Google Ireland Limited) where you have consented, and Google Fonts, which loads typefaces from Google's servers and receives your IP address as a technical necessity of that request.
We do not sell your information, and we do not use it for advertising.
How long we keep it
Enquiries that do not lead to care: [TO CONFIRM — commonly 12 to 24 months].
Where you go on to become a patient, your clinical record is retained in line with
professional guidance on medical records retention: [TO CONFIRM].
A backup copy of each enquiry is written to a server log, which is protected from public access and deleted on a routine schedule.
Cookies
We set no optional cookies until you accept them. When you first arrive, all analytics storage is switched off using Google Consent Mode, and Google Analytics runs without cookies. If you accept, the following are set:
_ga— distinguishes users. Expires after 2 years._ga_TEQ75HB7MD— maintains session state. Expires after 2 years.
Your choice is stored locally in your browser, not in a cookie, and is not sent to us. You can change it at any time using the Cookie settings link in the footer. Declining analytics does not affect any part of the site.
Your rights
You have the right to access your information, to have inaccurate information corrected, to request erasure, to restrict or object to processing, and to data portability. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.
To exercise any of these rights, email info@medicex.com. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you raised it with us first so we can put it right.
Changes
We will update this notice when our processing changes. Last updated: [TO CONFIRM on publication].