Compliance & GDPR

Privacy Policy

How Mr. Nijil Vasukutty handles patient details and website visitor data.

Last updated: July 2026

1. Introduction

This Privacy Policy outlines how Mr. Nijil Vasukutty, Specialist Consultant Orthopaedic Foot & Ankle Surgeon (GMC registration number 6072110), collects, stores, uses, and protects personal information. As a healthcare provider, the processing of clinical information is highly regulated to ensure confidentiality and safety.

In this policy, "we," "us," or "our" refers to Mr. Nijil Vasukutty and his private practice administrative support team.

2. Core Legislation

All personal and clinical data is collected and processed in compliance with the following regulations:

  • General Data Protection Regulation (GDPR) / UK GDPR
  • Data Protection Act 2018 (DPA 2018)
  • General Medical Council (GMC) guidelines on Patient Confidentiality

3. Data We Collect

To provide clinical diagnosis, medical treatment, and administrative care, we process:

Patient Records

  • Identifiers: Full name, date of birth, gender, and NHS number.
  • Contact Info: Address, telephone numbers, and email address.
  • Clinical Data: Consultation records, referral letters, diagnostic scans (X-rays, MRIs), surgical notes, discharge summaries, and medical history.
  • Financial & Insurance Info: Health insurance provider details, policy/membership numbers, pre-authorization codes, and billing details.

Website Visitors

  • Enquiry Data: Names, email addresses, and phone numbers submitted via our contact form.
  • Usage Data: Basic cookies and traffic statistics (such as IP addresses and pages visited) to ensure website functionality.

4. How We Collect Data

  • Directly from you during consultations or clinical enquiries.
  • Via website enquiry forms or email communication with our practice secretary.
  • From referring clinicians, such as General Practitioners (GPs), physiotherapists, or other medical specialists.
  • From the clinical information systems of Ramsay Health Care (The Boston West Hospital) or Circle Health Group (The Lincoln Hospital) where you receive treatment.

5. Legal Basis for Processing

  • Medical Diagnosis and Treatment: For the provision of healthcare services (GDPR Article 9(2)(h)).
  • Contract: To administer consultations, process claims with health insurers, and handle self-pay billing.
  • Consent: When you request that we share information outside standard medical networks or subscribe to updates.
  • Legal Obligation: To comply with GMC regulations, public health mandates, or medical audit requirements.

6. Sharing & Storing Your Information

To maintain clinical consistency, relevant portions of your data may be shared with:

  • Your referring General Practitioner (GP) via clinical letters.
  • Hospitals where your procedures are performed (Ramsay The Boston West Hospital or Circle The Lincoln Hospital).
  • Private medical insurance companies (Bupa, AXA, Vitality, Aviva, WPA, Simplyhealth) for pre-authorization and billing.
  • Medical review platforms (specifically Doctify) to request clinical quality and patient feedback.

Medical records are stored securely on accredited clinical databases that employ industry-standard encryption. Access is strictly restricted to Mr. Vasukutty and his authorized secretarial staff.

7. Data Retention

Clinical records are retained in compliance with NHS and Department of Health retention schedules. Standard medical files for adults are kept for a minimum of 8 years after the last date of treatment, after which they are securely destroyed or anonymized.

8. Your Rights

  • Request access to your medical records (Subject Access Request).
  • Request rectification of any inaccurate or incomplete personal information.
  • Request restriction of data processing under specific conditions.
  • Object to the processing of your data, where applicable.

Please note that the right to erasure ("right to be forgotten") is subject to statutory limitations concerning medical records, which must be retained for clinical and legal safety.

9. Contact & Enquiries

For any queries regarding your data protection rights, or to submit a Subject Access Request, please contact our Data Protection Officer (Secretary) at:

call