Privacy Policy and Website Terms

Last updated: 14 April 2026

1. Introduction

This website, yorkshirespinalsurgeon.com, is operated by Mr Chris Kellett of 2 Leighton St, Leeds LS1 3EB. In this policy, “we”, “us” and “our” refer to that organisation.

We are committed to protecting your privacy and handling your personal data fairly, lawfully and transparently.

This page explains:

• what personal data we collect through this website,
• how and why we use it,
• how we use cookies and analytics,
• your rights in relation to your personal data,
• the terms on which you may use this website.

Under UK data protection law, the organisation operating this website is the data controller for the personal data collected through the website. UK GDPR requires organisations collecting data directly from people to explain key points including identity, purposes, legal basis, recipients, retention, transfers and individual rights.

2. Contact details

If you have any questions about this policy or how your data is used, please contact:

Mr Chris Kellett
2 Leighton St, Leeds LS1 3EB

3. Important medical notice

This website and any contact form on it are provided for general enquiries only.

Please do not use this website or contact form for:

• medical emergencies,
• urgent clinical concerns,
• confidential or extensive medical information unless specifically requested.

If you require urgent medical help, contact the NHS, your GP, or emergency services as appropriate.

4. What information we collect

We may collect and process the following information through this website:

Information you provide directly

• your name,
• email address,
• telephone number,
• the contents of your message submitted through the contact form,
• any other information you choose to provide.

Technical information collected automatically

• IP address,
• browser type and version,
• device type,
• operating system,
• referring website,
• pages viewed,
• dates and times of visits,
• basic interaction and usage data collected through analytics cookies where you have consented.

ICO guidance says privacy information should be clear, easy to find, and provided in a way that matches how data is collected, such as alongside an online form.

5. How we use your personal data

We use your personal data to:

• respond to enquiries submitted through the contact form,
• communicate with you about your request,
• administer, protect and improve the website,
• monitor website performance and usage through analytics,
• maintain records of correspondence,
• comply with legal or regulatory obligations.

We will only use your personal data where we have a valid legal basis for doing so.

6. Our legal bases for using your data

Depending on the circumstances, we rely on the following legal bases:

Legitimate interests

We use contact form details to respond to website enquiries and manage the website effectively. We consider this a legitimate and proportionate use of personal data.

Consent

Where non-essential cookies, including analytics cookies, are used, we rely on your consent.

Legal obligation

We may use or retain information where necessary to comply with legal, regulatory, insurance, professional or safeguarding obligations.

Under PECR, non-essential cookies generally require clear information and consent, and the ICO specifically treats analytics cookies as requiring consent unless they are strictly necessary, which they usually are not.

7. Contact form enquiries

If you complete our contact form, we will use the information you provide to respond to your enquiry.

Please only provide the information needed for us to deal with your request. Unless specifically requested, do not include detailed medical records or highly sensitive information in the contact form.

We recommend including a short notice next to the form, for example:

“By submitting this form, you agree that we may use your details to respond to your enquiry. Please do not include urgent or extensive medical information in this form.”

That kind of just-in-time notice aligns with ICO guidance for online forms.

8. Special category data

Health information is treated as special category personal data under data protection law and requires extra protection.

This website is not intended to collect detailed health information through the contact form unless clearly necessary and expressly requested. If special category data is received, we will only use it where there is a lawful basis and an additional condition for doing so under applicable data protection law.

9. Cookies and analytics

Our website may use cookies and similar technologies.

Cookies are small text files placed on your device when you visit a website. Some are necessary for the site to function properly. Others help us understand how visitors use the site.

Cookies we may use

Strictly necessary cookies

These are essential for the operation, security and basic functionality of the website. They do not usually require consent.

Analytics cookies

We may use Google Analytics to help us understand how visitors use the site, for example which pages are visited most often, how long visitors stay on the site, and whether users encounter errors.

Google Analytics cookies are not strictly necessary. They should only be set if the user has given consent through a cookie banner or consent tool. ICO guidance requires clear and comprehensive information and, in most cases, consent before storing or accessing such technologies.

Managing cookies

When you first visit the website, you should be presented with a cookie banner that allows you to:

• accept analytics cookies,
• reject non-essential cookies,
• manage your cookie preferences.

You can also control cookies through your browser settings, though disabling some cookies may affect website functionality.

10. Google Analytics

If enabled with your consent, Google Analytics may collect information such as:

• pages visited,
• time spent on pages,
• approximate location data derived from IP address,
• device and browser information,
• navigation paths through the website.

We use this information to understand website usage and improve the website.

Where possible, IP anonymisation and privacy-friendly settings should be enabled, and Google Analytics should not be activated until consent has been obtained.

If Google processes analytics data on our behalf, it does so as a processor or independent controller depending on the configuration of the service and the relevant terms in place.

11. Sharing your information

We do not sell your personal data.

We may share your information with trusted third parties where necessary for website operation, administration, analytics, hosting, IT support, legal compliance or professional advice. This may include:

• website hosting providers,
• website developers or IT support providers,
• analytics providers such as Google,
• legal, regulatory or insurance advisers where necessary.

Where third parties process personal data on our behalf, we expect appropriate contractual and security measures to be in place.

12. International transfers

Some service providers, including certain analytics or cloud providers, may process personal data outside the UK.

Where personal data is transferred internationally, we will take steps required by applicable law to ensure appropriate safeguards are in place.

Article 13 requires organisations to tell people about intended international transfers and the safeguards relied upon where relevant.

13. How long we keep your information

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including dealing with enquiries, maintaining records, meeting legal obligations, and resolving disputes.

Typical retention periods may include:

• contact form enquiries, up to 12 months after the matter is closed,
• technical logs, up to 12 months,
• analytics data, according to the settings in the analytics platform.

You should tailor these periods to your actual internal processes.

14. Data security

We take reasonable technical and organisational measures to protect personal data collected through this website against unauthorised access, misuse, loss, disclosure or destruction.

However, no internet transmission or website can be guaranteed to be completely secure. You submit information at your own risk.

15. Your rights

Subject to applicable law, you may have the right to:

• request access to your personal data,
• request correction of inaccurate data,
• request erasure of your data,
• request restriction of processing,
• object to processing based on legitimate interests,
• request transfer of your data in certain circumstances,
• withdraw consent where processing is based on consent.

You also have the right to complain to the Information Commissioner’s Office if you believe your data has been handled unlawfully or unfairly. The ICO requires privacy notices to explain people’s rights and how they can exercise them.

16. Third party websites

This website may contain links to third party websites. We are not responsible for the privacy practices, content or security of those websites. You should review their own privacy policies.

17. Website content disclaimer

The content on this website is provided for general information only. It is not medical advice and should not be relied upon as a substitute for consultation with an appropriately qualified healthcare professional.

While we aim to keep information accurate and up to date, we make no express or implied representation or warranty as to the completeness, accuracy, reliability or suitability of the website content.

18. Acceptable use

By using this website, you agree not to:

• use the website in any way that is unlawful or fraudulent,
• attempt to gain unauthorised access to the website, server or connected systems,
• introduce malicious code, viruses or harmful material,
• misuse the contact form for spam, harassment or abusive communications.

We reserve the right to restrict or block access where this website is misused.

19. Intellectual property

Unless otherwise stated, the content on this website, including text, graphics, branding and layout, is owned by or licensed to us and is protected by intellectual property laws.

You may view pages for your own personal, non-commercial use. You may not reproduce, republish or commercially exploit website content without prior written permission.

20. Liability

To the fullest extent permitted by law, we exclude liability for any loss or damage arising from use of, or inability to use, this website or reliance on its content.

Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot lawfully be excluded.

21. Changes to this policy

We may update this Privacy Policy and Website Terms from time to time. Any changes will be posted on this page with a revised “Last updated” date.

Because ICO guidance is being reviewed following legal changes introduced by the Data (Use and Access) Act 2025, it is sensible to keep this page under periodic review.

22. Governing law

These terms are governed by the laws of England and Wales, and any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

‍