Mr Karl Pang is the data controller for personal information collected through this website and his private practice. [Practice legal entity and ICO registration number to be confirmed.]
2. Information we collect
Contact details you give us, information about your health that you choose to share, appointment and payment details, and, with your consent, anonymous website analytics.
3. How we use it
To arrange and provide your care, communicate with you, process payments and insurance claims, and meet our legal and professional obligations. We do not use your information for marketing without your consent.
4. Legal basis
We process health information to provide medical care, under UK GDPR Article 9(2)(h), and with your explicit consent where required.
5. Sharing
With your consent, we share information with your GP, the hospital where you are seen, laboratories and your insurer. We never sell your information.
6. Retention
Medical records are kept for the periods set out in the NHS Records Management Code of Practice, normally eight years after your last contact.
7. Your rights
You can ask to see, correct or delete your information, or object to how it is used. Contact the practice to make a request; we will respond within one month.
8. Cookies
Essential cookies are always on. Analytics and embedded content only load if you accept them, using the preferences below.