Professor Malcolm Finlay’s private practice is the data controller for personal information collected through this website. Contact: pa@drmalcolmfinlay.com · 020 7183 0514.
When you request an appointment or contact us we collect your name, contact details, preferred location and consultation type, and any information you choose to share about your health and symptoms.
Your information is used to respond to your enquiry, arrange and manage appointments, and provide your care. Legal bases under UK GDPR include your consent, the provision of healthcare, and our legitimate interests in running the practice.
Details about your health are special category data under UK GDPR Article 9. They are handled confidentially, in line with GMC guidance and medical confidentiality obligations, and used only for your care.
Your information may be shared with the PA team, the hospital where you are treated (Welbeck London, St Bartholomew’s or Whipps Cross), and — with your consent — your GP or insurer. Your data is never sold.
Medical records are retained in accordance with NHS and professional record-keeping guidance. Enquiry data that does not become part of a medical record is kept only as long as needed.
You have the right to access, correct or (where applicable) erase your personal data, to object to or restrict processing, and to withdraw consent. You may complain to the Information Commissioner’s Office (ico.org.uk) at any time.
For any privacy question or to exercise your rights, contact pa@drmalcolmfinlay.com.
