Privacy notice
This notice explains how I collect, use and protect personal information, including health information, when you use this website, contact me, or are seen by me as a patient. This notice took effect on 1 March 2026 and is reviewed every year.
Who I am
I am Dr Pravin Jha, a consultant geriatrician. My private practice, Sheffield Memory Service & Geriatric Care, is run by Fulwood Healthcare Limited, a company registered in England and Wales (company number 08463148), of which I am a director. Fulwood Healthcare Limited is the data controller for the personal information described in this notice. In this notice, “I” and “me” mean Dr Jha acting for the company.
- Email: admin@geriuk.com
- Phone: 07855 740098
- Postal address: Dr Pravin Jha, c/o Spire Claremont Hospital, 401 Sandygate Road, Sheffield S10 5UB
- Information Commissioner’s Office registration number: ZA230853 (Fulwood Healthcare Limited)
When you are seen at Spire Claremont Hospital, Circle Thornbury Hospital or LivingCare, the hospital also keeps its own records as a separate data controller, under its own privacy notice.
What information I collect
When you contact me or book
Your name, contact details, date of birth, the place and type of appointment you want, and the reason for the appointment, including any health information you choose to put in your message. If a relative or carer contacts me on your behalf, I also hold their name and contact details.
Before and during your care
Health information you and your family give me, including answers to the pre-consultation questionnaires on this website, your medical history, medicines, examination findings, test results, letters from other clinicians, and my reports. Health information is “special category” data and receives extra protection in law.
When you visit this website
Basic technical information needed to deliver the website securely, such as your IP address and browser type, which the web host records in server logs. If you accept analytics cookies, Google Analytics also records how the website is used (see Cookies below).
You can include health information in the message box of the booking form. It is sent over an encrypted connection and stored in the website’s password-protected admin area; it is not sent by email. If you ask me to reply by email, I reply to the address you give; ordinary email is not end-to-end encrypted, so tell me if you would rather I phone.
How and why I use your information
- to arrange and manage your appointments and respond to your enquiries
- to assess, diagnose and treat you, and to write reports and letters about your care
- to communicate with your GP and other professionals involved in your care
- to invoice and take payment
- to meet my legal and professional obligations, including keeping medical records, dealing with complaints, and cooperating with regulators
- to keep this website secure and, if you agree, to understand how it is used
The legal basis
Under the UK General Data Protection Regulation (UK GDPR) I rely on:
- contract, or steps before a contract, to arrange and provide your consultation
- legal obligation, for keeping medical and financial records
- legitimate interests, for running the practice, answering enquiries and keeping the website secure
- consent, for analytics cookies, which you can withdraw at any time
For health information I rely on Article 9(2)(h) of the UK GDPR (the provision of health care) together with the Data Protection Act 2018, Schedule 1, Part 1, paragraph 2. Your health information is handled by me as a health professional under a duty of confidentiality.
Who I share your information with
I share only what is necessary, and only for your care or where the law requires it:
- your GP, who receives a report after every consultation
- other clinicians and services involved in your care, such as laboratories, imaging services and hospitals, when I arrange tests or refer you
- the hospital or clinic where you are seen
- a relative or carer, where you have agreed to this, or where you lack capacity and it is in your best interests
- my professional advisers, indemnity provider or regulators, if required
- the police, courts or other authorities, where the law requires it
I also use service providers who process information on my behalf, under contract and only on my instructions:
- GoDaddy: website hosting and the admin@geriuk.com mailbox, including the database where website form entries are stored
- Google: Google Analytics, only if you accept analytics cookies
Video consultations take place over WhatsApp video or FaceTime, which are end-to-end encrypted: the companies that provide them cannot see or hear the call.
I do not sell your information or use it for marketing.
Website forms and questionnaires
The booking form and the patient questionnaires on this website are stored in the website’s database. I read them there, in the website’s password-protected admin area. The email I receive when a form or questionnaire is sent only tells me that it has arrived; it does not contain your answers, your message or your name. I reply by email unless you ask me to phone; emails between us are kept in my practice mailbox, which is hosted on the same GoDaddy servers as the website. Only I have a login to the website’s admin area and to the mailbox. If that ever changes, this notice will say who else has access and why.
If a relative or carer fills in a questionnaire, I also hold their name, contact details and relationship to the patient.
I copy what I need into your clinical record. Every form entry, including any files uploaded with it and any partly completed form saved to finish later, is deleted from the website automatically 90 days after it was sent.
International transfers
Some service providers may process information outside the UK. Where this happens, I rely on UK adequacy regulations or the appropriate safeguards required by UK law, such as the International Data Transfer Agreement. The website and the admin@geriuk.com mailbox are hosted by GoDaddy on servers in the European Union, which the UK recognises as providing adequate protection. If you accept analytics cookies, Google may process analytics data in the United States under the UK Extension to the EU-US Data Privacy Framework.
How long I keep information
- Medical records: at least 8 years after your last contact with me, in line with the Records Management Code of Practice for Health and Social Care
- Enquiries that do not lead to an appointment: the copy on the website is deleted after 90 days; emails between us are kept for 12 months in my mailbox
- Financial records: at least 5 years after the relevant tax return deadline, as HMRC requires
- Analytics data: 14 months
Cookies
This website uses only the cookies it needs to work, unless you choose to allow analytics:
- geriuk_consent: remembers your cookie choice. Necessary. Kept for 180 days.
- Google Analytics (_ga, _ga_*): counts visits and shows which pages are used, including clicks on phone and booking links. Set only if you select Accept. Kept for up to 2 years.
- Text size: if you use the “Larger text” button, your choice is saved in your browser’s local storage on your own device. It is not sent to me.
You can change your choice at any time using the “Cookie settings” link at the bottom of every page.
Your rights
You have the right to:
- ask for a copy of the information I hold about you
- ask me to correct information that is wrong
- ask me to delete information, although I must keep medical records for the periods above
- ask me to restrict or object to how I use your information
- ask for information you gave me to be transferred to someone else, where this applies
- withdraw consent at any time, where I rely on consent
To make a request, email admin@geriuk.com. I will respond within one month. There is normally no charge.
I do not make decisions about you using automated decision-making or profiling.
Keeping information secure
I use access controls, secure passwords, encrypted connections and reputable service providers to protect your information, and I only give access to people who need it.
Complaints
If you are unhappy with how I have handled your information, please contact me first. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Changes to this notice
I review this notice every year, and sooner if anything changes. The date at the top shows when the current version took effect.