Privacy Policy

Last updated: June 2026  ·  Clarity Health Consultancy Ltd (trading as Mr Shahid Farid, Consultant Surgeon)  ·  GMC 6077673

1. Who we are

This website is operated by Clarity Health Consultancy Ltd, registered in England and Wales. Our principal place of business is at Spire Leeds Hospital, Jackson Avenue, Leeds LS8 1NT. For all data protection enquiries, contact us at secretary@shahidfarid.co.uk or call 07742 419021.

We are registered with the Information Commissioner's Office (ICO). This policy applies to all personal data collected through this website and through consultations arranged via it.

2. What personal data we collect and why

Enquiry and booking forms

When you submit a form on this website, we collect your name, email address, telephone number, and any clinical or administrative details you choose to provide. This data is used solely to respond to your enquiry and, where appropriate, arrange a private consultation.

Clinical information

If you share health-related information (symptoms, diagnoses, medications), this constitutes special category data under UK GDPR Article 9. We process it under Article 9(2)(h) — necessary for the provision of health care — and our internal clinical governance policies.

Website usage data

We do not use Google Analytics or any behavioural tracking platform. Limited technical data (IP address, browser type, pages visited) may be logged by our hosting provider, Netlify, for security and performance purposes only.

3. Legal basis for processing

• Consent — for enquiry form submissions and non-essential cookies (Article 6(1)(a)).
• Legitimate interests — for basic website security logging (Article 6(1)(f)).
• Health care provision — for any clinical information shared with us (Article 9(2)(h)).
• Legal obligation — where we are required to retain records under medical or financial law.

4. International transfers (Netlify / USA)

This website is hosted by Netlify, Inc., a US-based company. Form submissions and website data are processed on Netlify's infrastructure, which may involve transfer of personal data to the United States. Netlify participates in the UK–US data bridge framework and provides appropriate safeguards under UK GDPR Article 46 via Standard Contractual Clauses (SCCs). You can review Netlify's Data Processing Agreement at netlify.com/legal/dpa.

5. Who we share your data with

Your personal data may be shared with the following parties, only as necessary:

• The private hospitals (Spire Leeds, Spire Methley Park, Nuffield Health Leeds) — where your procedure is scheduled, for pre-operative administration and clinical records.
• Your GP — a consultation letter will ordinarily be sent to your referring or registered GP unless you request otherwise.
• Netlify, Inc. — our hosting provider, for form handling and website delivery (see section 4).
• Doctify / Top Doctors — review widgets embedded on this site may process your data in accordance with their own privacy policies if you interact with them.

We do not sell, rent, or share your personal data with any third party for marketing purposes.

6. How long we keep your data

Enquiry data where no consultation takes place is retained for 12 months, then securely deleted. Clinical records relating to a consultation or procedure are retained for a minimum of 8 years from the date of last contact, in line with NHS and GMC guidance (or until age 25 for records relating to children). Financial records are kept for 6 years in accordance with HMRC requirements.

7. Your rights under UK GDPR

You have the following rights in relation to your personal data:

• Right of access — to receive a copy of the personal data we hold about you.
• Right to rectification — to have inaccurate data corrected.
• Right to erasure — to have your data deleted, where no overriding legal obligation requires retention.
• Right to restriction — to limit how we use your data while a dispute is resolved.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to processing based on legitimate interests.
• Right to withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact secretary@shahidfarid.co.uk. We will respond within one month. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.

8. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Form submissions are transmitted over HTTPS. Access to patient correspondence is restricted to authorised practice staff only.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect the most recent revision. Continued use of this website after a change constitutes acceptance of the updated policy.