Your information, and how we look after it.

Who we are

Growth and Airway (“we”, “us”, “our”) provides jaw, airway and sleep health care for children and adults at our London and Edinburgh practices. For the purposes of UK data protection law, the data controller is [legal entity / practice name to confirm], registered at [registered address to confirm].

We are registered with the Information Commissioner's Office (ICO) under registration number [ICO registration number to confirm]. If you have any questions about this notice or about how we handle your information, you can reach us at drbkrishnan@gmail.com [to be updated to office@growthandairway.com] or by calling 020 3838 0866.

What information we collect

We only collect what we need to respond to you and to run the website.

Information you give us

When you complete the enquiry form on our Contact page, we collect your name, email address, phone number (if you provide it), the type of enquiry you select, and the content of your message. You choose what to put in your message, and it may include information about your health or your child's health if you decide to share it.

Information collected automatically

Like most websites, ours records limited technical information when you visit, such as your IP address, browser type, the pages you view and the date and time of your visit. This is used to keep the site secure and working, and (with your consent) to understand how the site is used. See Cookies and analytics below.

Accessibility (WelcoMe)

Our Accessibility page includes a tool called WelcoMe, provided by Wel-Co. If you choose to use it to tell us about your access or communication needs before a visit, the information you enter is processed through WelcoMe and shared with our team. Using WelcoMe is entirely optional.

How we use your information, and our lawful basis

Why	Lawful basis (UK GDPR)
To respond to your enquiry and arrange or provide care	Taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us
To keep the website secure, available and working correctly	Our legitimate interest in running a safe, functioning website
To measure and improve how the website is used (analytics)	Your consent
To meet our legal and regulatory obligations as a healthcare provider	Legal obligation

We do not sell your information, and we do not use it for automated decision-making or profiling.

Health information

Information about your health is treated as a special category of personal data and given extra protection. We only process it where you have given it to us yourself, or where we are providing or managing healthcare and the law allows it.

Please do not include detailed medical information in the website enquiry form. A short note about why you are getting in touch is all we need at this stage. Once we are in touch, we will gather any clinical detail through secure, appropriate channels.

Who we share your information with

We use a small number of trusted service providers who process information on our behalf, under contract and only on our instructions:

Provider	What they do
Cloudflare, Inc.	Hosts the website and securely processes your enquiry form submission
Resend	Delivers your enquiry to us by email
Google	Email (Google Workspace / Gmail) where we receive and store your enquiry; embedded maps on the Contact page; website analytics (with your consent)
Wel-Co (WelcoMe)	Processes the access needs you choose to share through the Accessibility page

We may also disclose information where we are required to do so by law, or to protect the safety of a patient or others.

International transfers

Some of our providers are based outside the UK, including in the United States. Where your information is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law, such as the UK extension to the EU–US Data Privacy Framework or the International Data Transfer Agreement / Standard Contractual Clauses, so that your information remains protected.

Cookies and analytics

Cookies are small files stored on your device. We use them in two ways:

• Strictly necessary cookies keep the site secure and working. These don't need your consent.
• Analytics and measurement cookies (through Google Analytics, loaded via Google Tag Manager) help us understand how the site is used so we can improve it. These are only set if you accept them.

When you first visit, a cookie banner lets you accept or reject non-essential cookies. Until you accept, analytics and other non-essential cookies stay switched off. You can change your choice at any time through the cookie settings on the site, or by clearing cookies in your browser.

Some pages include content from other services, which may set their own cookies once that content loads: the embedded Google Maps on the Contact page, the WelcoMe tool on the Accessibility page, and any embedded video on our blog. Their use of cookies is governed by their own privacy policies.

How long we keep your information

We keep enquiry messages for only as long as we need them to deal with your enquiry and for a reasonable period afterwards. If you go on to become a patient, your clinical records are kept in line with the retention periods that apply to dental and healthcare records. Website analytics data is retained for a limited period in line with our analytics settings.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information, where we no longer need it;
• ask us to restrict or object to how we use it;
• ask us to transfer certain information to another provider; and
• withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, please contact us using the details above. We will respond within one month. Exercising your rights is free, and it will not affect the care you receive.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

Changes to this notice, and how to contact us

We may update this notice from time to time. When we do, we will change the “last updated” date at the top of the page. For any question about your privacy or this notice, contact us at drbkrishnan@gmail.com [to be updated to office@growthandairway.com] or on 020 3838 0866.