Who we are
This website, bristolhipsurgeon.co.uk, is run by Stephen Eastaugh-Waring, Consultant Orthopaedic Hip Surgeon. We are the data controller for personal information collected through this website, which means we decide how it is used and are responsible for looking after it.
We are registered with the Information Commissioner’s Office (ICO), registration number [ICO number].
If you have any questions about this notice or how we use your information, contact us:
- Email: sally.payne@soc-bristol.co.uk
- Phone: 0117 933 9987
What we collect and why
We only collect information you choose to give us. Simply reading this website does not require you to tell us anything about yourself.
| What | Information | Why we use it | Lawful basis |
|---|---|---|---|
| Contact form | Your name, email address, phone number (optional), what your enquiry is about, your message | To reply to your enquiry | Your consent, which you give by ticking the box on the form, and our legitimate interest in answering enquiries |
| Phone calls and emails to Stephen’s secretary | Your name, contact details and what you tell us | To arrange appointments and answer questions | Taking steps at your request before providing care (contract), and our legitimate interests |
| Website technical data | Your IP address and browser details, recorded briefly by our hosting server | To keep the website secure and working | Our legitimate interest in running a secure website |
| Website statistics (Google Analytics) | Pages visited, how you reached the site, approximate location (town or region), device and browser type. Google Analytics does not store your full IP address | To see which pages are useful and improve the website | Your consent, given through the cookie banner. You can change your mind at any time |
We do not use your information for marketing, we do not sell it, and we do not use it to make automated decisions about you.
Medical information
Please do not send detailed medical information through the contact form or by email. Stephen will discuss your condition with you in clinic.
If you do include health details in a message, we will treat them as special category data under UK GDPR. We will use them only to respond to you and arrange your care, as part of providing healthcare (Article 9(2)(h)), and keep them confidential.
Once you become a patient, your medical records are covered by separate privacy notices: the hospital where you are seen (Spire Bristol Hospital, Nuffield Health Bristol Hospital or North Bristol NHS Trust for Southmead) and, for private care, [Stephen’s private practice patient privacy notice]. You can ask any of them for a copy.
Cookies and other services
We use a small number of cookies. Strictly necessary cookies keep the site working and secure, for example protecting the contact form from spam and remembering your cookie choice. These don’t need your consent.
We also use Google Analytics, added through Google’s Site Kit plugin, to count visits and see which pages are useful. Its cookies are only set if you click Accept on the cookie banner. You can change your choice at any time using the Manage consent link at the bottom of every page.
| Cookie | Set by | Purpose | Kept for |
|---|---|---|---|
| cmplz_* (e.g. cmplz_banner-status, cmplz_statistics) | This website | Remembers your cookie choice | 12 months |
| _ga | Google Analytics | Distinguishes one visitor from another | 2 years |
| ga[ID] | Google Analytics | Keeps track of your visit | 2 years |
Google processes Analytics data for us as our service provider, and some of it may be handled in the United States under safeguards approved for UK transfers. Google’s own privacy policy is at policies.google.com/privacy. We have turned off Google signals and advertising features, so the data is not used for ads. [Confirm these settings in Google Analytics: Admin → Data collection, and Data sharing.]
- Fonts: the site’s fonts are provided by Google Fonts. When a page loads, your browser fetches them from Google’s servers, which receives your IP address and browser details. Google Fonts does not set cookies. We use it because it is a reliable, fast way to show the site’s fonts (our legitimate interest).
- Directions links: “Get directions” opens Google Maps in a new tab. We don’t embed maps on our pages, so nothing is shared with Google unless you click the link; from then on Google’s own privacy policy applies.
- Links to other sites: links to hospitals, the NHS and other organisations are covered by their own privacy policies.
Who sees your information and how long we keep it
Your enquiry is read by Stephen and his secretary. To arrange your care we may pass your details to the hospital where you choose to be seen. We do not share your information with anyone else unless the law requires it.
We use these service providers, who can only use your information on our instructions:
- Kinetic Pulse, which hosts and maintains this website [in the UK]
- Google, which provides Google Analytics (only if you accept analytics cookies)
We keep:
- Enquiries that don’t lead to an appointment for up to [12 months], then delete them
- Enquiries that lead to an appointment: these become part of your patient record and are kept for as long as medical records must be kept
- Form submissions stored on the website (if saved) for [3 months], then deleted
We protect your information with secure (HTTPS) connections, restricted access and up-to-date software.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information we hold about you
- ask us to correct information that is wrong
- ask us to delete your information
- ask us to limit how we use it, or object to us using it
- withdraw your consent at any time, where we rely on it
- ask for your information in a format you can take elsewhere
Some rights depend on the circumstances. For example, we may need to keep medical records for a set time. To use any of these rights, contact us using the details under Who we are. It is free, and we will reply within one month.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
We may update this notice from time to time. The latest version is always on this page.
Last updated: 01/11/2026