info@drwaqasgaba.com  ·  Spire Central Booking: 01253 308031

Dr Waqas Gaba is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how information is collected, used, stored and shared when you visit this website, submit an enquiry or use our private gastroenterology and hepatology services.

1. Who We Are

This website represents the private medical practice of Dr Waqas Gaba, Consultant Gastroenterologist and Hepatologist.

For personal information collected directly through this website or by the practice, Dr Waqas Gaba acts as the data controller unless another hospital, clinic or healthcare provider is separately responsible for your information.

2. Information We Collect

We may collect personal information when you contact the practice, submit an enquiry, arrange an appointment or receive medical services.

This may include:

  • your name, email address and telephone number;
  • your date of birth and postal address;
  • appointment and consultation details;
  • information about your GP or referring clinician;
  • private medical insurance and payment information;
  • symptoms, medical history and health concerns;
  • test results, diagnostic reports and treatment information; and
  • information included in emails, forms or other correspondence.

When you use the website, we may also collect technical information such as your IP address, browser type, device, pages visited and general website usage data.

3. How We Use Your Information

We may use your personal information to:

  • respond to enquiries;
  • arrange and manage appointments;
  • provide consultations, investigations and treatment;
  • communicate with you about your care;
  • liaise with healthcare professionals involved in your treatment;
  • process payments or insurance claims;
  • maintain medical and administrative records;
  • improve the website and patient experience;
  • protect the website from misuse or security threats; and
  • comply with legal, regulatory and professional obligations.

4. Health Information

Information about your physical or mental health is considered special category personal data under UK data protection law.

We may process health information where it is necessary for medical diagnosis, treatment, healthcare management, legal obligations or the protection of vital interests.

Medical information is handled confidentially and is only accessed or shared where there is a valid reason to do so.

5. Lawful Basis for Processing

Depending on the circumstances, we may process your information because:

  • it is necessary to provide a service you have requested;
  • you have given consent;
  • we have a legitimate business or professional interest;
  • we must comply with a legal or regulatory obligation;
  • it is necessary for medical diagnosis or treatment; or
  • it is required to protect someone’s vital interests.

Where processing relies on consent, you may withdraw your consent at any time.

6. Sharing Your Information

We do not sell or rent your personal information.

Where necessary, information may be shared with:

  • your GP or referring clinician;
  • hospitals, clinics and healthcare professionals involved in your care;
  • laboratories, pharmacies and diagnostic providers;
  • private medical insurers;
  • payment, booking, hosting and IT service providers;
  • professional advisers;
  • regulatory or safeguarding authorities; and
  • law-enforcement bodies where legally required.

Only information reasonably necessary for the relevant purpose will be shared.

7. Website Enquiries

Please avoid submitting detailed or highly sensitive medical information through a general website contact form unless specifically requested.

Submitting an enquiry does not create a doctor–patient relationship and does not guarantee that an appointment will be offered.

This website must not be used for medical emergencies. In an emergency, call 999 or attend the nearest Accident and Emergency department.

8. Cookies and Analytics

This website may use cookies and similar technologies to support essential functions, improve performance, analyse visitor activity and remember user preferences.

Non-essential cookies will only be used where appropriate consent has been obtained.

Further details are provided in our Cookie Policy.

9. Data Security

Appropriate technical and organisational measures are used to protect personal information against unauthorised access, accidental loss, misuse, disclosure or destruction.

However, no website, email system or electronic storage method can be guaranteed to be completely secure.

10. Data Retention

Personal information is kept only for as long as necessary for the purpose for which it was collected.

Clinical records may be retained for longer periods to meet medical, legal, regulatory, insurance and professional record-keeping requirements.

When information is no longer needed, it will be securely deleted, anonymised or destroyed.

11. Your Rights

Under UK data protection law, you may have the right to:

  • access your personal information;
  • correct inaccurate or incomplete information;
  • request deletion of your information;
  • restrict or object to certain processing;
  • request data portability;
  • withdraw consent; and
  • complain about how your information has been handled.

These rights are not always absolute. In some cases, information must be retained because of legal, medical or professional obligations.

12. Third-Party Websites

This website may contain links to external websites, hospitals or service providers.

We are not responsible for the content, security or privacy practices of third-party websites. You should review their privacy policies before submitting personal information.

13. Children’s Information

Where information about a child or young person is collected, it will be handled with appropriate safeguards.

Information may be provided by a parent, guardian or authorised representative where legally appropriate.

14. Complaints

If you have concerns about how your personal information is handled, please contact the practice first.

You also have the right to complain to the Information Commissioner’s Office.

15. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in the website, services, legal requirements or data-handling practices.

Any updated version will be published on this page with a revised date.

16. Contact Us

For questions about this Privacy Policy or the use of your personal information, contact:

Dr Waqas Gaba