Privacy Policy

Dr Nikesh Devani is the data controller for personal information collected through this website and in the course of private consultations. I am committed to protecting your privacy in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

• Contact details such as your name, address, email and phone number.
• Date of birth, GP details and insurance information.
• Health information, including medical history, medications, test results and correspondence.
• Payment and booking details.
• Basic technical information when you use this website.

• To provide safe, effective medical care and arrange investigations.
• To manage appointments, billing and insurance claims.
• To communicate with you, your GP and other clinicians involved in your care.
• To meet legal, regulatory and professional obligations.

Your information is processed to deliver healthcare (UK GDPR Article 6(1)(b) and Article 9(2)(h)), to meet legal obligations, and for legitimate interests in running the practice. Where required, I will ask for your consent.

Your information is only shared where necessary for your care or where the law requires it — for example with your GP, referring clinicians, hospitals and clinics where you are seen, laboratories, your insurer, and secure service providers such as the Carebit patient portal. I never sell your data.

Your records are held securely using Carebit, an ISO-certified, GDPR-compliant Electronic Patient Record (EPR) software system. Carebit stores and processes your medical records, appointment history, clinical notes and billing information in secure, encrypted cloud environments.

Access to your clinical data within Carebit is restricted strictly to authorised healthcare professionals and practice administrative staff involved in your care. Clinical records are retained in line with NHS and GMC records-management guidance.

You have the right to access, correct or request deletion of your information, to restrict or object to processing, and to data portability, subject to legal and clinical record-keeping requirements. To make a request, please email referrals@drnikeshdevani.co.uk.

If you are unhappy with how your data is handled, you can complain to the Information Commissioner’s Office (ico.org.uk).

This policy may be updated from time to time. Please also see the terms and conditions.