Privacy Policy

Last updated: October 2026

Mo Herieka Plastic Surgery takes your privacy seriously. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit this website, contact the practice, attend a consultation or receive treatment.

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK data protection legislation.

Who we are

For the purposes of data protection law, the data controller is:

Mohammed Herieka

Consultant Plastic Surgeon

Email: secretary@moheriekaplasticsurgery.uk
ICO Registration Number: ZC230639

If you have any questions about how your information is used, or wish to exercise your data protection rights, please contact us using the email address above.

What information we collect

The information we collect depends on how you interact with the practice and may include:

  • your name, date of birth and contact details;

  • your address and demographic information;

  • information submitted through website enquiry or contact forms;

  • details of appointments and consultations;

  • relevant medical and surgical history;

  • medication, allergy and health information;

  • clinical examination findings;

  • clinical photographs;

  • correspondence between you and the practice;

  • consent forms, treatment plans and operative information;

  • postoperative and follow-up information;

  • information received from your GP, hospital or other healthcare professionals where appropriate;

  • payment, invoicing and transaction information;

  • your communication and marketing preferences; and

  • technical information about how you use this website, including device, browser and website analytics information.

Information concerning your health is classed as special category personal data under UK data protection law and receives additional protection.

How we use your information

We may use your personal information to:

  • respond to enquiries;

  • arrange consultations and appointments;

  • assess whether treatment may be appropriate for you;

  • provide medical and surgical care;

  • maintain accurate clinical records;

  • communicate with you before and after treatment;

  • arrange surgery and hospital admission;

  • coordinate your care with hospitals, anaesthetists, nurses and other healthcare professionals;

  • provide quotations and invoices;

  • process payments;

  • manage postoperative follow-up;

  • respond to concerns or complaints;

  • comply with professional, regulatory, legal and insurance obligations;

  • protect and defend legal rights;

  • administer and improve the practice;

  • operate, maintain and secure this website; and

  • send marketing communications where you have chosen to receive them.

We will only use your information where there is a lawful reason to do so.

Our lawful basis for processing your information

Depending on the circumstances, we may process your personal information because:

  • it is necessary to take steps at your request before entering into a contract;

  • it is necessary to provide services under our contract with you;

  • we have a legal or regulatory obligation;

  • it is necessary for our legitimate interests in operating and administering a safe private medical practice; or

  • you have given us consent.

Because medical information is special category data, an additional legal condition is required.

Where health information is used for your assessment, diagnosis, treatment or ongoing care, we will generally process it because this is necessary for the provision or management of healthcare by a healthcare professional who is subject to professional duties of confidentiality.

Where appropriate, information may also be processed for the establishment, exercise or defence of legal claims.

Where we rely on your explicit consent — for example, for certain uses of identifiable clinical photographs — you may withdraw that consent, subject to any other lawful reason we may have to retain the information.

Medical records

If you become a patient, information relating to your consultation and treatment will form part of your confidential medical record.

Medical records may include information about:

  • your medical history;

  • examination and assessment;

  • proposed treatment;

  • consent;

  • correspondence;

  • surgery;

  • medications;

  • postoperative recovery;

  • complications, where applicable; and

  • follow-up care.

Medical information is only accessed by individuals who have a legitimate clinical or administrative reason to do so.

Clinical photographs

Clinical photographs may be taken where appropriate as part of your assessment, surgical planning and follow-up care.

These photographs form part of your confidential medical record.

Clinical photographs will not automatically be used on this website, on social media, in advertising or for other promotional purposes.

If we would like to use identifiable photographs or other patient information for educational, promotional or marketing purposes, this will be discussed separately and appropriate consent will be obtained.

Choosing not to allow promotional use of photographs will not affect your medical care.

Website enquiries

If you contact the practice using the website, we will use the information you provide to respond to your enquiry and, where appropriate, arrange a consultation.

Please avoid entering unnecessary or highly sensitive medical information into a general website contact form.

Once you enter the formal patient pathway, relevant information may be transferred to the secure clinical or practice-management systems used to manage your care.

Who we may share your information with

Where necessary, your information may be shared with organisations and professionals involved in your care or in the administration of the practice.

These may include:

  • Nuffield Health Wessex Hospital and other healthcare facilities where treatment is provided;

  • consultant anaesthetists;

  • nurses and other healthcare professionals;

  • your GP, where clinically appropriate;

  • other doctors involved in your care;

  • pathology, laboratory or radiology providers;

  • medical secretarial and practice-management services;

  • secure clinical record and practice-management software providers;

  • payment-processing providers;

  • accountants and professional advisers where appropriate;

  • medical indemnity organisations and insurers;

  • regulatory or professional bodies;

  • legal advisers;

  • IT and website service providers; and

  • public authorities where disclosure is legally required.

We aim to share only the information that is reasonably necessary for the relevant purpose.

Some healthcare organisations involved in your treatment, including hospitals, may act as separate data controllers and have their own privacy policies.

Nuffield Health

Where consultations, investigations, surgery or other treatment take place at Nuffield Health Wessex Hospital, Nuffield Health may collect and process information about you separately in connection with your hospital care.

Nuffield Health is responsible for its own processing activities and maintains its own privacy information.

Website hosting and Squarespace

This website is hosted using Squarespace.

Squarespace and associated service providers may process certain technical information required to host, secure and operate the website.

Information submitted through website forms may pass through systems operated by Squarespace or other service providers before being received by the practice.

Some of our service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that appropriate legal safeguards are in place.

Cookies and website analytics

This website may use cookies and similar technologies.

Cookies may be used to:

  • provide essential website functionality;

  • maintain website security;

  • remember preferences;

  • understand how visitors use the website;

  • measure website performance; and

  • support marketing or advertising activities where enabled.

Essential cookies may be required for the website to function.

Where required by law, non-essential cookies will not be used unless you have provided the appropriate consent.

You can manage your cookie preferences through the cookie controls provided on this website.

UK guidance requires website users to be told about cookies and, in general, requires active consent before non-essential cookies are placed. ICO

Marketing communications

Making an enquiry or becoming a patient does not automatically mean that you will be added to a general marketing mailing list.

Where we send optional promotional or marketing communications by email or text message, we will do so in accordance with applicable data protection and electronic communications legislation.

Where marketing is based on your consent, you may withdraw that consent at any time.

You can unsubscribe using the link provided in a marketing communication or contact:

secretary@moheriekaplasticsurgery.uk

Withdrawing consent to marketing will not affect your medical care.

How long we keep your information

We will retain personal information only for as long as necessary for the purposes for which it was collected and to comply with our professional, clinical, legal, regulatory, tax and insurance obligations.

Different categories of information may be retained for different periods.

Clinical records may need to be retained for a significant period after your treatment has finished because of medical, professional, regulatory and legal requirements.

Information relating solely to an initial enquiry that does not progress to treatment may generally be retained for a shorter period.

Where information is no longer required, it will be securely deleted, destroyed or anonymised where appropriate.

How we protect your information

We take appropriate technical and organisational measures to protect your personal information against:

  • unauthorised access;

  • accidental loss;

  • inappropriate disclosure;

  • alteration;

  • destruction; and

  • misuse.

Access to medical and other confidential information is restricted to those who require it for legitimate clinical or administrative purposes.

Healthcare professionals are also subject to professional duties of confidentiality.

Your rights

Depending on the circumstances, UK data protection law may give you the right to:

  • request a copy of personal information we hold about you;

  • request correction of inaccurate or incomplete information;

  • request deletion of your information in certain circumstances;

  • request restriction of processing;

  • object to certain types of processing;

  • request transfer of your information where applicable; and

  • withdraw consent where processing relies on consent.

These rights are not absolute.

For example, we may be unable to delete information contained within your medical record where we have a professional, regulatory or legal obligation to retain it.

To exercise any of these rights, contact:

secretary@moheriekaplasticsurgery.uk

We may need to verify your identity before responding to your request.

The rights that apply can depend on the legal basis on which information is being processed. ICO

Your right to object

You have the right to object to certain processing of your personal information, including the use of your information for direct marketing.

If you object to the use of your information for direct marketing, we will stop using it for that purpose.

Please contact:

secretary@moheriekaplasticsurgery.uk

Complaints

If you are concerned about how your personal information has been handled, please contact us in the first instance:

secretary@moheriekaplasticsurgery.uk

We will aim to investigate and respond to your concerns appropriately.

You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

The ICO can be contacted through its website at ico.org.uk.

Children

This website and the cosmetic surgery services promoted through it are not directed at children.

We do not knowingly use this website to collect personal information from children for marketing purposes.

Where information relating to a child is processed as part of legitimate medical care, it will be handled in accordance with applicable legal and professional requirements.

Links to other websites

This website may contain links to external websites.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy information of any external website before providing personal information.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practice, services, website, technology or legal requirements.

The most recent version will always