Privacy Policy

Last updated: 14 October 2026

1. Who we are

This website is run by Shoulderdoctor Limited, a company registered in England and Wales under company number 07206035 (“we”, “us”), which operates Shoulder Doctor London and the practice of Professor Tony Kochhar. We are the “controller” of the personal information collected through this website under the UK GDPR and the Data Protection Act 2018.

You can contact us at admin@shoulderdoctor.co.uk or on 020 7770 8185 (Monday to Friday, 9am to 5pm).

This policy covers only the information collected through this website. It does not describe how clinical records or care information are handled if you become a patient. If you would like to know more about that, please ask us, or ask the hospital or clinic where you are seen.

2. What information we collect

When you send an appointment request through the form, we collect:

• your first and last name;
• your telephone number and email address;
• the clinic location you would prefer, and the condition or reason for the appointment you select;
• any notes you choose to write about your symptoms or medical history. This is information about your health, which is a special category of personal data. Please only include what you are comfortable sharing, and nothing you do not need to.

If you email or phone us, we keep the details you give us so that we can reply.

Technical information. When you use the form, our system briefly uses your internet (IP) address to limit repeated submissions and protect the site from misuse. Our hosting provider may also keep standard server logs, such as IP address, browser type and the date and time of requests.

3. Cookies and tracking

This website does not use analytics, advertising or tracking cookies. The site uses fonts supplied by Google Fonts. When a page loads, your browser contacts Google to fetch the fonts, so Google receives your IP address and basic browser details. Google processes this under its own privacy policy and may process it outside the UK.

4. Why we use your information, and our legal basis

• To respond to your appointment request and arrange your appointment. Our legal basis is that you ask us to take steps before providing a service to you (UK GDPR Article 6(1)(b)) and our legitimate interest in running the practice (Article 6(1)(f)).
• Health information you give us in the form. We rely on your explicit consent (UK GDPR Article 9(2)(a)), which you give by ticking the consent box on the form. You can withdraw your consent at any time by contacting us, although this will not affect what we have already done with your information.
• Security and preventing misuse of the website. Our legal basis is our legitimate interest in keeping the website and our systems safe (Article 6(1)(f)).

We do not sell your information and we do not use it for marketing unless you have asked us to.

5. Who we share your information with

• Our team, who handle appointment requests.
• The service providers that host this website and deliver our email, who act on our instructions.
• The hospital or clinic you choose, where this is needed to arrange your appointment. Once we pass your details to them, they are a separate controller of that information and handle it under their own privacy notice.
• Google, for the fonts described above.
• Regulators, courts or other third parties, where the law requires us to share information.

6. How long we keep it

We keep appointment requests only for as long as we need them to respond to you, arrange your care and keep a proper record of your request. We then delete them securely. Technical records used to limit repeated submissions are short-lived.

7. Keeping your information safe

This website uses an encrypted (HTTPS) connection, and we limit who can see appointment requests. No method of sending information over the internet is completely secure, and ordinary email is not guaranteed to be private. If you would rather not send sensitive details online, please call us instead.

8. Your rights

Under data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information in some circumstances;
• ask us to restrict how we use it, or object to our using it based on our legitimate interests;
• ask for the information you gave us in a portable format, where this applies;
• withdraw your consent at any time, where we rely on it.

To use any of these rights, contact us using the details above. We aim to reply within one month.

9. Complaints

If you are unhappy with how we have used your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

10. Links to other websites

This website links to other sites, such as Doctify, Substack, Instagram and TikTok. They have their own privacy policies, and we are not responsible for how they use your information.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Please also read our Disclaimer.