Last updated: 23 August 2026
Who we are
This website is operated by Miss Rakhee Nayar, Consultant Plastic Surgeon and Mohs micrographic surgeon, GMC reference number 6100945, practising as a sole practitioner.
Miss Nayar is the data controller for the personal information described in this policy, and is registered with the Information Commissioner’s Office under registration number ZB556258.
You can contact us about anything in this policy at contact@mohssurgeon.co.uk, or by post at The Courtyard, Hall Lane, Wincham, Northwich, Cheshire CW9 6DG.
What this policy covers
This policy explains what we do with personal information you give us through this website, mainly through the enquiry form, the e-consultation request, and any email or phone contact that follows.
It does not cover the clinical records we hold once you become a patient. Those are governed by our patient records policy and by the rules of the hospital where you are treated, and we will give you that information separately.
The information we collect
When you send an enquiry or request a consultation, we collect your name, email address, phone number, and whatever you choose to tell us about your reason for getting in touch.
That last part matters. If you describe a lesion, send a photograph, mention a diagnosis, or tell us about your medical history, that is health information. UK data protection law treats health information as a special category of personal data and gives it extra protection. We treat it the same way.
When you use the website, we collect standard technical information through Google Analytics: the pages you visit, roughly where in the world you are, what device and browser you use, and how you arrived. These analytics cookies are currently set when you arrive on the site. We are adding a consent banner so that you can choose before they are set. Until that is in place you can opt out using Google’s browser add-on at tools.google.com/dlpage/gaoptout, or by blocking cookies in your browser settings.
We do not ask for, and you should not send us, your NHS number, financial details, or a copy of any identity document through the website form.
Why we use it, and our legal basis
- To reply to your enquiry — Article 6(1)(f), our legitimate interest in responding to people who contact us.
- To handle any health information you send us — Article 9(2)(h), health and social care purposes, provided by a professional under a duty of confidentiality.
- To arrange a consultation or procedure — Article 6(1)(b) contract, and Article 9(2)(h).
- Analytics — Article 6(1)(a), your consent. A consent banner is being added so that this basis is properly obtained before analytics cookies are set; see the Cookies section below for what happens in the meantime.
- To keep records of enquiries — Article 6(1)(c), legal obligation.
Miss Nayar is a registered medical practitioner and is bound by a duty of confidentiality under the GMC’s Good Medical Practice. Any clinical information you send is handled under that duty.
We do not use your information for marketing, and we do not sell, rent or share it with anyone for their own marketing purposes.
Who sees it
Your information is seen by Miss Nayar and by the administrative staff who support her practice.
We also use these service providers, who process information on our behalf under contract:
- WP Engine, for website hosting. Enquiry data passes through the site’s servers.
- Google Analytics, for website usage statistics, only with your consent.
- Site Mailer, operated by Elementor Ltd, which delivers the email notification of your enquiry to the practice.
If you go on to have treatment, we will share relevant clinical information with the hospital where you are treated, with your GP, and with your insurer if you are using private medical insurance. We will tell you when we do this.
We may disclose information without your consent where the law requires it, or where there is a serious risk to someone’s safety. This is rare, and the GMC’s confidentiality guidance sets out when it applies.
Where it goes
Your information is stored in the UK or the European Economic Area wherever possible. Some of our providers, including Google, may process data outside the UK. Where that happens, the transfer is covered by the UK International Data Transfer Agreement or by adequacy regulations, so your information keeps the same legal protection.
How long we keep it
Enquiries that do not lead to treatment: we keep these for 12 months, after which they are deleted.
If you become a patient, your clinical records are kept in line with the retention periods that apply to private medical records in the UK, and with the record-keeping requirements of the hospital where you were treated.
Analytics data is retained by Google Analytics for 14 months.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you
- have inaccurate information corrected
- ask us to delete information, where we are not required to keep it
- ask us to restrict how we use it
- object to processing based on our legitimate interests
- withdraw consent to analytics cookies at any time
- receive your information in a portable format
To exercise any of these, email contact@mohssurgeon.co.uk. We will respond within one month.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113.
Cookies
We use two kinds of cookie.
Necessary cookies make the website work. They remember your cookie choices and keep the site secure. These are set automatically because the site cannot function without them.
Analytics cookies are set by Google Analytics and tell us how people use the site. These are currently set when you arrive. We are adding a consent banner so that you can choose first. In the meantime you can block them in your browser settings, or opt out of Google Analytics entirely with Google’s browser add-on.
We do not use advertising or tracking cookies.
Security
The website uses HTTPS, so information you send through the form is encrypted in transit. Access to enquiry data is limited to Miss Nayar and her administrative staff. We keep our website software and plugins up to date.
No website can promise perfect security. If something you want to tell us feels too sensitive for a web form, please call the practice instead.
A note on urgent symptoms
This website provides general information. It is not a diagnosis, and sending us an enquiry does not create a doctor-patient relationship.
If you have a skin lesion that is changing, bleeding, or not healing, see your GP. They can refer you on the NHS two-week-wait pathway for suspected skin cancer. Do not wait for a reply from us before doing that.
Changes to this policy
We will update this page if how we handle information changes, and we will change the date at the top.