Last updated: 18 October 2026
This policy explains how Patrick Jassar ENT Services Limited ("we" or "us") handles personal information in connection with yorkshirerhinoplasty.co.uk, enquiries and the services described below. Yorkshire Rhinoplasty is the name of this website. We handle information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Patrick Jassar ENT Services Limited is the data controller for the personal information described in this policy. Enquiries are handled by Mr Patrick Jassar and his medical secretary. Our contact details appear at the end of this policy.
Our Information Commissioner’s Office registration reference is ZA236584.
The website enquiry form asks for your name, email address and telephone number so that Mr Jassar and his medical secretary can respond and arrange a preliminary Zoom discussion. Our hosting provider sends the form details to them by email. We also receive information you provide when you contact us directly.
We do not sell your personal information or use it to send marketing messages.
Mr Jassar uses Zoom for preliminary discussions. These discussions are not recorded, transcribed or summarised using automated or AI features.
If you wish to proceed, you book directly with Spire Healthcare. Consultations and treatment take place through Spire, which manages the hospital clinical records under its own privacy policy.
Mr Jassar takes photographs of patients in connection with rhinoplasty care. These photographs form part of the clinical record.
We process information where necessary to take steps at your request before entering a contract, or to fulfil a contract with you. We also rely on our legitimate interests in answering enquiries, administering our services, protecting the website and understanding its use. Where applicable, we process information to meet legal obligations.
Health information has additional protection. Where necessary for medical assessment, diagnosis or treatment, the applicable condition is Article 9(2)(h) of the UK GDPR and Schedule 1, Part 1, paragraph 2 of the Data Protection Act 2018. This requires processing by, or under the responsibility of, a health professional subject to a duty of confidentiality.
This website does not use cookies or external analytics services. Our hosting provider records IP addresses, pages visited, access times and browser information to protect the website and produce usage statistics. Statistics are generated after IP addresses have been anonymised. The form also uses IP-based checks to limit repeated submissions.
We use Cloudflare Turnstile to protect the form against spam and automated abuse. It processes your IP address and information about your browser and device. Cloudflare also acts as a controller for information used to improve its bot detection. Further details appear in the Cloudflare Turnstile Privacy Addendum.
We keep general enquiry correspondence while an enquiry remains active and for necessary follow-up, and delete it when it is no longer needed. Information may need to be retained longer where relevant to a complaint, a legal claim or a legal or professional obligation. Information held by Spire is subject to its own retention arrangements.
Photographs of patients who have undergone surgery are retained indefinitely unless the patient requests their removal. Requests for removal are considered subject to applicable clinical and legal requirements. Photographs associated with active prospective enquiries are kept while those enquiries remain active; those relating to inactive prospective enquiries are deleted.
Our hosting provider anonymises IP addresses in website access and email delivery logs daily. Website access logs are kept for 12 months; email delivery logs are kept for four days. Form emails are removed from the delivery system once sent, or within 72 hours if undelivered. Temporary copies may remain in full server backups for up to three further days. These periods are separate from those applying to received enquiry emails.
Mr Jassar and his medical secretary receive enquiries and copies of website form submissions. His secretary is employed by Spire Healthcare and handles these copies through its systems. Spire is responsible for information it handles under its own arrangements. His secretary does not have access to Mr Jassar’s separate collection of photographs.
We use Cymru 1 Limited for website hosting and form-email delivery, Cloudflare for form security, Google Workspace for our email and Zoom for online discussions. Spire uses a Microsoft-provided email service. Mr Jassar uses Apple cloud services to store copies of his photographs. Providers processing information on our behalf must protect it appropriately.
Information may also be disclosed where required by law or where necessary and legally permitted for a complaint, legal claim or professional advice.
Website hosting and outgoing form-email processing take place in the UK. The email, security and online discussion providers mentioned above may process information outside the UK, including in the United States. Their published transfer safeguards include the UK Extension to the EU–US Data Privacy Framework for eligible transfers and standard contractual clauses with the UK Addendum where applicable.
Details are available in the published privacy and transfer information from Google, Microsoft, Cloudflare and Zoom. You can contact us for further information about the safeguards relevant to your information and how to obtain a copy.
Photographs stored using Apple’s cloud services may also be processed outside the UK. Further information about Apple’s international processing is available in its privacy policy. You can also contact us about the handling of your photographs.
We use appropriate security measures, including encrypted website connections, and limit access to people who need information to handle enquiries or support the relevant services.
Depending on the circumstances, you can ask to access, correct or delete your information, restrict its use, or receive certain information in a portable format. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing.
You have the right to object to processing based on legitimate interests. Please contact us to exercise this right.
These rights have legal limits; for example, clinical records may need to be retained. Requests are normally free and answered within one month. We will explain if the law allows additional time or a charge.
For questions about your information or to exercise your rights, please contact Patrick Jassar ENT Services Limited through Mr Jassar’s medical secretary:
Email: Ellie.Barker@spirehealthcare.com
Post: Patrick Jassar ENT Services Limited, c/o Mr Patrick Jassar, Spire Hull and East Riding Hospital, Lowfield Road, Anlaby, HU10 7AZ
You can also complain to the Information Commissioner’s Office at ico.org.uk.
We may update this policy as our arrangements change. The current version will appear on this website with a revised date.
