Privacy Notice
How we collect, use and protect your personal information.
Last updated: August 2026
This privacy notice explains how personal information is handled on the website privategp.doctor, operated by the private general practice of Dr Natasha Thandrayen, 25 Harley Street, London W1G 9QW.
Dr Natasha Thandrayen is the data controller for information collected through this website. Dr Thandrayen is registered with the General Medical Council and is bound by professional duties of medical confidentiality in addition to the obligations set out below.
Privacy queries: secretary@privategp.doctor
Telephone: 0207 935 1711
Post: Dr Natasha Thandrayen, 25 Harley Street, London W1G 9QW
Scope of this notice
This notice covers information collected through the website — principally enquiries you send us and anonymous analytics about how the site is used.
It does not cover your medical records. If you become a patient, the clinical information recorded during your care is held separately, under the confidentiality obligations that apply to all medical practice in the UK, and is retained in line with professional record-keeping requirements. You will be given information about how your clinical records are handled at the point you register as a patient, and you are welcome to ask about this at any time.
What information we collect
- Enquiry forms — your name, email address, telephone number, the appointment type or service you have selected, and the content of your message when you submit the form on our contact page.
- Email and telephone contact — anything you choose to send us directly.
- Analytics — anonymous usage data such as pages visited, time on the site, approximate location and browser type, collected via Google Analytics 4, and only where you have consented.
- Cookies and local storage — see the Cookies section below.
Please do not include detailed medical information in a website enquiry form. A brief indication of what you would like to discuss is helpful; anything clinically sensitive is better raised in consultation.
How we use your information
- To respond to your enquiry and to arrange, confirm or change appointments.
- To provide the medical care you have asked for, where you go on to become a patient.
- To improve the website using aggregated, anonymous analytics.
We do not sell your personal information, and we do not share it with third parties for marketing purposes.
Legal basis for processing
Under the UK General Data Protection Regulation, we rely on the following:
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry | Legitimate interests (Article 6(1)(f)) — replying to someone who has contacted us about our services. |
| Arranging and providing care | Contract (Article 6(1)(b)), and for health information, the provision of health care and treatment (Article 9(2)(h)). |
| Analytics cookies | Consent (Article 6(1)(a)) — which you may give or withhold, and withdraw at any time. |
How long we keep it
Enquiries submitted through the website are retained in our email system for as long as is necessary to respond to you and, where relevant, to manage your care. Enquiries that do not lead to an appointment are not kept indefinitely and are deleted once they are no longer needed.
Analytics data is retained by Google Analytics for 14 months, after which it is deleted automatically.
Clinical records, where they exist, are retained for the periods required of medical practitioners in the UK, which are considerably longer than the periods above.
Cookies and similar technologies
When you first visit this site, a banner asks whether you are willing to allow anonymous analytics. Nothing is tracked until you choose.
We use Google Consent Mode. Analytics storage is set to denied by default and is only enabled if you press Accept. Advertising storage is set to denied at all times and is never enabled — we do not run advertising or remarketing on this site.
| Name | Type | Purpose |
|---|---|---|
| pgp_consent_v1 | Local storage | Remembers whether you accepted or declined analytics, so you are not asked again. Stored in your browser only and never transmitted to us. |
| _ga, _ga_<id> | Cookie | Google Analytics. Set only if you press Accept. Distinguishes visitors so that visit numbers are counted accurately. |
Changing your mind
Your choice is stored in your browser's local storage rather than in a cookie. To change it, clear this site's site data or local storage in your browser settings — the banner will then appear again on your next visit and you can choose differently. Declining analytics does not affect any part of the website's functionality.
Third-party services
A small number of external services are used to run this website. Each has its own privacy policy.
- Google Analytics 4 — anonymous website analytics, loaded only with your consent.
- Google Maps — the clinic location maps on our home, contact and locations pages are embedded from Google. These load with the page, so Google may receive your IP address and set its own cookies when you visit those pages, independently of your analytics choice. If you would prefer to avoid this, the clinic addresses are also given in plain text and you may search for them separately.
- Google Fonts — typefaces are loaded from Google's servers, which means Google receives your IP address when a page loads.
- Web3Forms — processes submissions from the contact form and forwards them to us by email.
- Carebit — our online booking system. If you book through it, the information you enter is held by Carebit under its own privacy policy.
- IONOS — our web hosting provider, which processes standard server logs.
Links to external sites, including our Doctify reviews page, take you to services we do not control. Their privacy policies apply once you leave this site.
Your rights
Under UK GDPR you have the right to:
- Be told what personal data we hold about you, and ask for a copy of it.
- Ask us to correct anything that is inaccurate or incomplete.
- Ask us to delete your data, where there is no overriding reason to keep it. Clinical records are subject to mandatory retention periods and generally cannot be deleted on request.
- Object to, or ask us to restrict, certain processing.
- Withdraw your consent to analytics at any time, as described above.
- Complain to the Information Commissioner's Office.
To exercise any of these rights, please email secretary@privategp.doctor. We will respond within one month.
Keeping your information secure
This website is served over an encrypted HTTPS connection. Access to enquiry emails is limited to Dr Thandrayen and her secretarial team. Clinical information is held in line with the security standards expected of medical practice in the UK.
Complaints
If you are unhappy with how your personal information has been handled, please contact us first so that we have the opportunity to put it right. If you remain dissatisfied, you may complain to the Information Commissioner's Office at ico.org.uk, by telephone on 0303 123 1113, or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Changes to this notice
We may update this notice from time to time. Any changes will be published on this page, and the "last updated" date at the top will be revised.
Book an appointment
Consultations at 25 and 150 Harley Street, Monday to Friday, 9am–5pm.
0207 935 1711 Book an Appointment