Privacy Policy
Privacy Policy
Last updated: 2 September 2026
1. Who we are
This policy explains how Georgina Williams Plastic Surgery Limited (“we”, “us” or “our”) collects and uses personal information through this website, enquiries and related communications.
For the purposes of UK data-protection law, the data controller is:
Georgina Williams Plastic Surgery Limited
Company number: 15944391
19 West Eaton Place
London
SW1X 8LT
United Kingdom
Telephone: +44 7748 856893
Email: joel@georginawilliamsplasticsurgery.com
Where a clinic or hospital independently determines how your information is used, it may be a separate data controller and will provide its own privacy information.
2. Information we collect
Depending on how you interact with us, we may collect:
- your name, title, date of birth and contact details;
- appointment and enquiry information;
- information included in a website form, email, telephone call or message;
- health information relevant to your enquiry, consultation or care;
- consultation notes, medical history, treatment records, consent documentation and correspondence;
- clinical or progress photographs where appropriate;
- payment, invoice and transaction information;
- communication and marketing preferences;
- complaint, feedback, safeguarding or incident information;
- technical information such as your IP address, browser, device and website-usage data; and
- information supplied by a clinic, hospital, referring practitioner, laboratory, insurer or another person involved in your care.
Please do not include unnecessary clinical details in a general website contact form.
3. How we use your information
We may use personal information to:
- respond to enquiries;
- arrange, confirm and administer appointments;
- assess treatment suitability and provide clinical care;
- communicate with you before and after treatment;
- maintain accurate medical and business records;
- process payments and manage accounts;
- coordinate care with clinics, hospitals and other professionals;
- respond to complaints or concerns;
- meet legal, regulatory, safeguarding and professional obligations;
- establish, exercise or defend legal claims;
- maintain website security and performance;
- improve our services; and
- send marketing communications where permitted.
4. Our legal bases
Under UK data-protection law, we rely on one or more of the following legal bases:
- Contract: processing is necessary to take steps at your request or perform a contract with you.
- Legal obligation: processing is necessary to comply with the law or professional and regulatory requirements.
- Legitimate interests: processing is necessary to administer the practice, secure the website, respond to enquiries or improve services, provided those interests are not overridden by your rights.
- Consent: you have given clear permission for a particular purpose, such as certain marketing or use of identifiable photographs.
- Vital interests: processing is necessary to protect someone’s life in an emergency.
Health information is special-category data. Where we process it, we will also rely on an additional legal condition, normally that processing is necessary for medical diagnosis, the provision or management of healthcare, or the establishment, exercise or defence of legal claims. Where appropriate, we may rely on explicit consent.
Consent to treatment and consent under data-protection law are separate matters.
5. Sharing information
Where necessary and lawful, information may be shared with:
- members of the clinical and administrative team;
- clinics, hospitals and healthcare professionals involved in your care;
- your GP, referring clinician or another professional where appropriate;
- laboratories, imaging providers, pharmacies and medical-device suppliers;
- emergency services or safeguarding authorities;
- professional advisers, insurers, regulators and legal representatives;
- payment, accounting, IT, website-hosting, booking, email and secure-storage providers; and
- public authorities where disclosure is legally required.
Service providers acting on our behalf must protect personal information and use it only for authorised purposes.
We do not sell personal information.
6. Marketing
We may send marketing by email or similar electronic means where you have consented or another lawful exception applies.
You may unsubscribe at any time by using the link in a message or emailing joel@georginawilliamsplasticsurgery.com.
Opting out of marketing will not prevent us from sending appointment, treatment, safety or administrative communications.
7. Clinical photography
Clinical photographs may be created where necessary for diagnosis, treatment planning, monitoring or the medical record.
Separate, specific permission will be obtained before identifiable clinical photographs are used for advertising, social media, education or another purpose outside confidential care, unless their use is otherwise legally permitted.
Refusing optional photographic use will not affect the standard of care you receive.
8. International transfers
Some technology providers may process information outside the United Kingdom.
Where this occurs, we use legally recognised protections, such as UK adequacy regulations, the UK International Data Transfer Agreement or an approved UK Addendum, together with appropriate security measures.
You may contact us for more information about safeguards relevant to your information.
9. How long we keep information
We keep information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy medical, legal, regulatory, insurance and accounting requirements.
Clinical records are retained in accordance with applicable professional guidance, records-management standards, indemnity requirements and legal limitation periods. Different periods may apply to children, patients who lack capacity, implants, clinical trials or ongoing treatment.
General enquiries that do not lead to treatment are normally retained for up to 12 months after the last communication unless there is a legal or operational reason to retain them longer.
Financial records are retained for the period required by tax and company law.
At the end of the applicable period, information is securely deleted or anonymised unless continued retention is required by law.
10. Security
We use appropriate technical and organisational safeguards designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.
No internet transmission is completely secure. Please do not use ordinary email or website forms to send information requiring immediate clinical attention.
11. Your rights
Subject to applicable law, you may have the right to:
- request access to your personal information;
- ask for inaccurate or incomplete information to be corrected;
- request deletion in certain circumstances;
- request restriction of processing;
- object to processing based on legitimate interests;
- object to direct marketing;
- request transfer of information you supplied in a portable format;
- withdraw consent where processing is based on consent; and
- complain to the Information Commissioner’s Office.
Some rights are limited where information must be retained for clinical, legal, safeguarding or regulatory reasons.
To exercise a right, email joel@georginawilliamsplasticsurgery.com. We may need to verify your identity.
12. Complaints
Please contact us first if you have concerns so that we can try to resolve them.
You may also complain to the Information Commissioner’s Office:
Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
13. Children
This website is not directed at children for independent use.
Where care involves a child, information will be handled with regard to the child’s age, understanding, best interests, parental responsibility and applicable confidentiality rules.
14. External links
External websites linked from this website operate under their own privacy policies. We are not responsible for how they handle personal information.
15. Changes to this policy
We may update this policy to reflect changes to our services, technologies or legal obligations. The current version and effective date will be published on this page.
16. Contact us
Privacy enquiries and requests may be sent to:
Georgina Williams Plastic Surgery Limited
19 West Eaton Place
London
SW1X 8LT
United Kingdom
Telephone: +44 7748 856893
Email: joel@georginawilliamsplasticsurgery.com
