Privacy Notice
Nottingham Ophthalmology / Mr Subramaniam – Consultant Ophthalmologist Last updated : October 2025
1. Introduction
This Privacy Notice explains how Nottingham Ophthalmology and Mr Subramaniam (Consultant Ophthalmologist) collect, use, and protect your personal information when you receive ophthalmic care, attend consultations, or interact with our website and administration team. We are committed to safeguarding your privacy and complying fully with UK data-protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who we are
- Data Controller: Mr Subramaniam / Nottingham Ophthalmology
- ICO registration: Z643967X
- Telephone: 0772 0748611
- Email: alison.higginson123@gmail.com
If you have any questions about this notice or how your data are handled, please contact us using the details above.
3. What information we collect
We collect and process information necessary to provide ophthalmic care, including:
- Personal details (name, date of birth, address, contact information)
- NHS number and GP details
- Medical history and clinical notes
- Diagnostic images and test results (for example, OCT scans, visual fields, photographs)
- Referral correspondence and outcome letters
- Billing and insurance information (if applicable)
- Feedback, compliments, or complaints
4. How we obtain your information
We receive information:
- Directly from you during appointments, telephone calls, emails, or website enquiries
- From your GP, optometrist, or another healthcare provider through referral
- From diagnostic tests or imaging carried out as part of your care
- From private medical insurers (if relevant)
5. Purpose and lawful basis for processing
We process your information to:
- Provide safe, effective ophthalmic care and treatment
- Maintain accurate medical records
- Communicate with you and other healthcare professionals involved in your care
- Manage appointments, billing, and administration
- Meet legal and regulatory requirements
The lawful bases under UK GDPR include:
- Article 6(1)(e) – processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority
- Article 6(1)(f) – legitimate interests in managing a professional medical practice
- Article 9(2)(h) – processing necessary for medical diagnosis and the provision of health or social care
6. Sharing your information
We share information only when necessary for your care or where we have a legal obligation to do so, for example:
- Your GP, optometrist, or referring clinician
- Hospital eye departments or other specialists involved in your treatment
- NHS commissioners or regulators (for audit and reporting)
- Insurers or billing providers (if private care)
All recipients are bound by professional confidentiality and data-protection duties.
7. Data storage and security
Your records are stored securely on encrypted systems or within locked paper files in accordance with NHS and ICO guidance. We use appropriate technical and organisational measures to protect against unauthorised access, loss, or alteration of data.
8. How long we keep your information
Clinical records are retained for the period recommended by the Department of Health (usually eight years after last contact, or longer for certain conditions). When no longer required, data are securely destroyed or anonymised.
9. Your rights
You have the right to:
- Access a copy of your information
- Request correction of inaccurate or incomplete data
- Request erasure (in certain circumstances)
- Object to or restrict processing
- Request transfer of your data to another provider
- Complain to the Information Commissioner’s Office (ICO) if you are unhappy with how your information is handled
ICO contact: www.ico.org.uk | 0303 123 1113
10. Website and online enquiries
If you submit an enquiry through our website, we collect only the information you provide (such as name, email, and message). These details are used solely to respond to your query and are not added to marketing lists unless you request updates.
11. Updates to this notice
We review this Privacy Notice regularly to ensure it remains accurate and compliant. Any updates will be posted on our website or made available in-clinic.
