Privacy Policy

1. Who we are

This website, nosesurgeryuk.com, is operated by Symmetry Clinic London ("we", "us", "our"). Symmetry Clinic is a specialist nasal and facial plastic surgery practice led by Mr Santdeep Paun, FRCS.

2. What data we collect

We may collect the following personal information when you use this website:

• Contact details you provide when booking a consultation or submitting an enquiry — name, email address, telephone number.
• Health-related information you voluntarily share through our self-assessment tool or consultation forms (e.g. concerns about nasal appearance or breathing).
• Technical data collected automatically — IP address, browser type, device information, pages visited, and referring URL.
• Cookie and tracking data — see Section 7 below.

3. How we use your data

We use your personal data for the following purposes:

• To respond to your consultation booking or enquiry.
• To provide you with information about our rhinoplasty procedures and services.
• To send appointment reminders and pre-operative information.
• To improve our website, services, and user experience.
• To comply with our legal and regulatory obligations as a healthcare provider.
• To measure the effectiveness of our advertising campaigns (with your consent).

4. Legal basis for processing

We process your personal data under the following legal bases (UK GDPR):

• Consent — when you submit an enquiry, book a consultation, complete the self-assessment tool, or accept non-essential cookies.
• Contractual necessity — to fulfil a consultation booking or provide requested services.
• Legitimate interests — to improve our website and services, and to ensure the security of our systems.
• Legal obligation — to comply with healthcare regulations, including record-keeping requirements.

5. How we share your data

We do not sell your personal data. We may share it with:

• Booking and CRM platforms — we use GoHighLevel to manage consultation bookings and patient communications.
• Analytics and advertising partners — Google Analytics, Google Ads, and Meta (Facebook/Instagram) receive anonymised or pseudonymised data to measure campaign performance. This data is processed in accordance with each provider's data processing agreements.
• Healthcare partners — hospitals and anaesthetists involved in your care, where necessary.
• Professional advisors — accountants, lawyers, or insurers where required.
• Law enforcement — where required by law or regulation.

6. International transfers

Some of our service providers (including Google and Meta) process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or UK adequacy decisions, in accordance with UK GDPR.

7. Cookies and tracking

This website uses the following tracking technologies:

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling cookies may affect the functionality of this website.

8. Data retention

We retain your personal data for the following periods:

• Enquiries and consultation bookings — up to 2 years from your last interaction with us, unless you become a patient.
• Patient medical records — in accordance with NHS and CQC guidelines (typically 10 years for adults, or until the patient reaches age 25, whichever is longer).
• Analytics data — anonymised analytics data is retained for up to 26 months.

9. Your rights

Under UK GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Erase your data (subject to legal and medical record-keeping obligations).
• Restrict the processing of your data.
• Object to processing based on legitimate interests or direct marketing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@symmetryclinic.com or call 07915 912007.

10. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is served over HTTPS, and access to personal data is restricted to authorised personnel only.

11. Children

This website is not directed at children under 18. We do not knowingly collect personal data from anyone under 18 years of age. Rhinoplasty consultations are available to patients aged 18 and over.

12. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

13. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.