Privacy Policy

Last updated: 16/08/26

Introduction

We appreciate the trust you place in us when you share your personal information. Protecting that information is important to us. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it and how we keep it secure. It also explains your rights over your personal data and how to exercise them.

Please read this carefully. By providing your personal data to us, or by using our website, you accept the practices described in this policy.

Who we are

Oniorthopaedics Limited is the data controller for the personal data described in this policy. We are committed to protecting your privacy and to meeting our obligations under the UK GDPR and the Data Protection Act 2018.

  • Data controller: Oniorthopaedics Limited (registered in England and Wales, company number 12811109)
  • Registered office: One Bell Lane, Lewes, East Sussex, BN7 1JU
  • ICO data protection registration number: ZB211809
  • Contact for data protection matters: Mr Oni, t.oni@nhs.net, 01892 362736

If you have any questions about this policy or how we use your information, please contact us using the details above.

This policy does not cover other websites we link to. We encourage you to read the privacy policies of any other sites you visit.

The personal data we collect

This website collects only the information you choose to send us when you make an enquiry, together with limited technical information about your visit:

  • Enquiry details: when you complete the enquiry form or contact us, we collect your name, email address, telephone number and anything you choose to include in your message. If your message describes a health condition or symptoms, that is health information (a "special category" of personal data), which we handle with particular care.
  • Website technical data: information your browser sends when you visit, such as your approximate location, IP address, device type and browser. Where you consent, we use analytics cookies to understand how the site is used (see our Cookie Policy).

We do not hold your medical records on this website. Any clinical records relating to your care are held by the hospital that treats you. See "How your enquiry is handled" below.

How your enquiry is handled

When you submit an enquiry through this website, it is sent to the booking team at The Horder Centre so they can arrange your consultation. A copy of your initial enquiry is also held by our website platform provider, Webflow, which stores and processes it on our behalf under a data processing agreement. We retain these enquiries for 6 months and then delete them.

Once your consultation is arranged, all further communication and your ongoing care are handled directly by the treating hospital, away from this website. Your care and any medical records created as part of it are managed by the hospital where you are treated under its own privacy notice, for example The Horder Centre's privacy notice. This website is not used to deliver or record your clinical care.

Our lawful basis

We rely on the following lawful bases under the UK GDPR:

  • Handling your enquiry: where your enquiry includes health information, we rely on Article 9(2)(h) (processing necessary for the provision of health care) together with Article 6(1)(b) (taking steps at your request before entering into a contract), and the explicit consent you give when you submit the form.
  • Website analytics and administration: we rely on your consent for analytics cookies, and on our legitimate interests for the secure operation and improvement of the website, where this is fair and not detrimental to you.

Who we share your enquiry with

We share your enquiry only with:

  • The booking team at The Horder Centre, to arrange your consultation
  • Our website platform provider (Webflow), which stores and processes the enquiry and technical data on our behalf

We do not sell your information or share it for marketing. We will only disclose it otherwise where the law requires it, or where someone's safety is at risk. Once your care is underway, any onward sharing of clinical information (for example with your GP or insurer) is handled by the treating hospital under its own privacy notice, not by this website.

Cookies

Our website uses cookies, which are small text files placed on your device that help the site function and help us understand how it is used. When you first visit, we ask whether you accept non-essential cookies. You can withdraw or change your choice at any time through your browser settings or our cookie preferences.

For full details of the cookies we use, please see our Cookie Policy.

How we use your contact details

We use the contact details you provide only to respond to your enquiry and to pass it to the hospital's booking team so your consultation can be arranged. You can subscribe to recieve updates from Mr Oni and insights into orthopaedics and relevant hip and knee conditions. Any appointment reminders or ongoing correspondence come from the treating hospital, not from this website.

How long we keep your personal data

We keep website enquiries no longer than necessary. Enquiries stored via our website platform are retained for 6 months and then deleted. Any records relating to your clinical care are held separately by the treating hospital, in line with its own retention policy and the statutory requirements for medical records.

How we keep your personal data secure

We take all reasonable measures to keep your information secure. Our website and enquiry data are hosted by Webflow. As Webflow is based in the United States, your enquiry data may be transferred outside the UK; where this happens we rely on appropriate safeguards (such as the UK extension to the EU-US Data Privacy Framework and/or standard contractual clauses) to protect it.

Your rights

Under data protection law you have the right to:

  • Ask us to correct inaccurate data (rectification)
  • Ask us to delete your data in certain circumstances (erasure)
  • Ask us to restrict how we use your data (restriction)
  • Request access to the data we hold about you (subject access)
  • Receive certain data in a portable format (data portability)
  • Withdraw consent where consent is our lawful basis
  • Object to processing based on our legitimate interests
  • Not be subject to solely automated decisions with legal or similarly significant effects

To exercise any of these rights, please contact us using the details in the "Who we are" section. We verify the identity of anyone making a request and may refuse where we cannot do so.

Complaints

If you have concerns about how we have handled your personal data, please contact us first using the details above. If you remain dissatisfied, you can contact the Information Commissioner's Office (ICO):

  • Phone: 0303 123 1113
  • Website: ico.org.uk
  • Post: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.