020 7496 3597 shahnawaz.khan4@nhs.net 27 Tooley Street, London, SE1 2PR
Legal & Compliance

Privacy Policy

How we collect, use, and protect your personal information

Mr Shahnawaz Khan Consultant Orthopaedic Surgeon Last updated: June 2026

Your privacy matters to us. This policy explains how Mr Shahnawaz Khan's practice collects, uses, and safeguards your personal and medical information in compliance with applicable data protection legislation. Please read this document carefully.

Section 01

Information We Collect

We may collect the following categories of information depending on how you interact with our practice:

  • Personal details — your full name, contact number, email address, residential address, date of birth, and insurance details when you book appointments or fill out forms.
  • Medical information — health history, test results, diagnostic images, prescriptions, and consultation notes collected during your visit.
  • Technical data — your IP address, browser type, device details, and pages visited, collected through cookies and analytics tools when you browse our website.
Section 02

How We Use Your Information

Your information is used solely for the following purposes:

  • Providing quality healthcare services, including diagnosis, treatment, and follow-up care.
  • Scheduling appointments, processing payments or insurance claims, and communicating relevant updates.
  • Improving your overall patient experience and the standard of care we deliver.
  • Sending appointment reminders or health-related information via SMS or email, where you have opted in.
  • Using website analytics data to enhance our site's performance and user experience.
Please note: We will never use your personal or medical information for marketing purposes or share it with third parties for commercial gain.
Section 03

Data Sharing & Confidentiality

We do not sell or rent your personal information under any circumstances. Your data is shared only with the following parties on a strictly need-to-know basis:

  • Authorised medical professionals and clinical staff involved directly in your care.
  • Diagnostic laboratories processing your test samples or imaging.
  • Insurance companies involved in the processing or settlement of your claims.
  • Government authorities or law enforcement agencies, where disclosure is required by law.
All third parties with whom we share your data are bound by strict confidentiality agreements and applicable data protection legislation to ensure your information remains protected.
Section 04

Data Protection Measures

We implement robust technical and organisational safeguards to protect your data from unauthorised access, misuse, loss, or alteration. Our security measures include:

  • SSL encryption for all data transmitted via our website and online forms.
  • Secure, access-restricted data storage environments.
  • Regular data backups to prevent loss or corruption of records.
  • Mandatory staff confidentiality training and role-based access controls.
While we strive to maintain complete security, no digital system is entirely immune from threats. We advise all patients to take appropriate precautions on their own devices, such as keeping software updated and using strong passwords.
Section 05

Your Rights

As a patient and/or website user, you hold the following rights in relation to your personal data:

  • The right to access your personal and medical records held by us.
  • The right to request corrections to any inaccurate or incomplete information.
  • The right to withdraw consent for non-essential communications at any time.
  • The right to request deletion of your data where legally applicable.
To exercise any of these rights, please contact us using the details provided below. We will respond to all valid requests within a reasonable time frame and in accordance with applicable law.
Section 06

Children's Privacy

Our services and website are intended for individuals aged 18 and above. We do not knowingly collect personal data from children under the age of 18.

If a parent or guardian believes we have inadvertently collected information from a minor, please contact us immediately so we can take appropriate and prompt action to remove such data from our records.

Questions About This Policy?

If you have any concerns about how your data is handled or wish to exercise your rights, please get in touch with us directly.

020 3553 9022
sulaiman.mahmood2001@gmail.com
London Bridge Hospital, HCA Healthcare UK