Privacy notice

Who is responsible

Mr Jay Goswamy FRCS is the data controller for the information collected through this website, registered with the Information Commissioner’s Office under number ZA502469. You can reach the practice at care@jaygoswamy.com or on 0161 726 5100 with any question about how your details are used, or to make any of the requests set out below.

What this website collects

There are two places on this site where you can type something. The first is the appointment request form on the contact page:

• your name, telephone number and email address
• who the appointment is for, how you expect to pay, and any hospital preference
• whatever you choose to write in the free text box
• the fact that you ticked the consent box, and when

The second is the Help panel, linked at the foot of every page. If you use it to ask a question, it takes your name, your email address, your question, and your permission for the practice to reply. If you use it to tell us something is broken, or to suggest an improvement, it takes only what you write: you are not asked for your name or your email address, and neither is stored.

Either way it also records which page you were on, the size of your browser window and which browser you were using, because a report about a page is little use without them, along with your IP address, which is used only to stop the panel being flooded.

Neither the form nor the Help panel is a route for detailed medical information, and neither is a route for anything urgent. A sentence about what is going on is enough for the team to route your enquiry. If you do write something about your health, it is treated as special category data and handled with the same care as a clinical record.

There is no account to create, no tracking or advertising cookie, and no analytics profile built about you.

Why, and on what basis

Your details are used for one thing: to answer what you sent and arrange your care. The lawful basis is your consent, given by ticking the box on the contact form or in the Help panel, and you can withdraw it at any time by contacting the practice. Withdrawing consent does not affect anything already done with your permission.

A report that something on the site is broken carries no name and no email address. The page details and the IP address recorded alongside it are kept on the basis of our legitimate interest in keeping this website working and in preventing the form being abused.

Where it is stored

Enquiries and Help messages are stored in a database hosted by Supabase in London, United Kingdom. A copy of an enquiry, and of a question asked through Help, is emailed to the practice inbox so the team can reply. If you use the appointment request form, an acknowledgement is sent to the email address you give, so that you know the enquiry arrived. It confirms receipt and repeats nothing of what you wrote. A report that something is broken goes instead to a private Slack channel used by the people who maintain this website, and carries only what you wrote and the page you were on. The database is closed to public access: nothing can be read from it through this website. The site itself is hosted by Vercel.

How long it is kept

Enquiries and Help messages are deleted after six months. That happens automatically, every night, rather than when somebody remembers. Where you go on to become a patient, the enquiry is superseded by your clinical record, which is retained under NHS records management rules rather than this notice.

Who else sees it

The practice management team, and Mr Goswamy. A report about the website itself is also seen by the people who maintain it. Your details are never sold, and are not shared for marketing. The only third parties involved are the hosting, email and messaging providers named above, acting on the practice’s instructions.

Cookies, maps and films

This site sets no cookies of its own. There is no analytics, no advertising and no tracking of any kind.

Two things on the site come from somewhere else and need your permission:

• the maps on the contact page, which are Google’s
• the four thyroid films on the videos page, which belong to Circle Health Group and are published on YouTube

Both set cookies and see your IP address when they load, so neither is requested until you say so. Until then you get a placeholder with a button on it. You can allow them once, for a single map or film, or for the whole site, and you can change your mind at any time using the cookie choices link in the footer. Your answer is remembered in your own browser’s storage rather than in a cookie, so declining leaves nothing behind at all.

Mr Goswamy’s own films, the four on the videos page and the introduction on the profile page, play without asking. They are hosted on his own Cloudflare Stream account rather than on a video platform, and they set no cookies and store nothing on your device. Cloudflare serves the video and sees the request, in the same way any host sees a request for a page.

Nothing else on the site depends on this. Both hospital addresses are written out in full on the clinics page alongside a map picture served from this site, which contacts nobody, and every condition is explained in writing.

Your rights

You can ask for a copy of what the practice holds about you, ask for it to be corrected or deleted, ask that it be restricted or moved elsewhere, and object to how it is used. Contact the practice and it will be dealt with within one month.

If you are not satisfied with the response you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.