Privacy Policy

This privacy policy explains how Mr Oliver J. Harrison's private practice handles the personal information you share when you contact us or use this website. It is written to meet the requirements of the UK GDPR and the Data Protection Act 2018.

Data controller: Mr Oliver J. Harrison, Consultant Thoracic Surgeon, practising at Spire Southampton Hospital, Chalybeate Close, Southampton SO16 6UY. Mr Harrison is registered with the Information Commissioner's Office under registration number ZB828057. For any question about your data, or to exercise the rights below, contact the practice secretary, Jill Lange, at jill.langer@spirehealthcare.com or on 02380 914453.

What we collect: the information required to arrange your consultation and provide care — typically your name, contact details, date of birth, GP and referrer details, insurer or payment details, and the clinical information you or your referrer choose to share (including scans, test results and correspondence). If you use the enquiry form on this website, the details you enter are sent by email to the practice and are not stored on this website.

Lawful basis: we process your personal data to provide health care under Article 6(1)(b)/(f) UK GDPR (contract and legitimate interests) and, for health information, Article 9(2)(h) UK GDPR (provision of health care and treatment). Where we rely on your consent — for example to contact you about an enquiry — you may withdraw it at any time.

Sharing: clinical information is shared only with those involved in your care, such as your GP, referring clinician, anaesthetist, the hospital treating you, and your insurer where you have asked us to invoice them. We do not sell your data and we do not use it for advertising or marketing profiling.

Storage and retention: clinical records are held securely within the hospitals in which Mr Harrison practises (Spire Southampton Hospital and University Hospital Southampton) and are subject to their information governance policies. Adult health records are retained for a minimum of eight years after the conclusion of treatment, in line with NHS and independent-sector records-management guidance. Enquiry emails that do not lead to a consultation are deleted within 12 months.

Your rights: you have the right to be informed, to request a copy of the information we hold about you, to have inaccurate information corrected, to request erasure or restriction where legally permissible, to object to certain processing and to data portability. Requests are answered within one month.

Complaints: if you are unhappy with how your data has been handled, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, by post at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or by telephone on 0303 123 1113.