This notice explains how personal information is handled when you visit joelgiblett.com or send a general enquiry. It does not replace the privacy information provided by your treating hospital or clinical service.
Who is responsible
The controller for this website and its general enquiries is Sirius Medical Ltd, trading as Dr Joel Giblett (company number 14757904). For privacy questions or to exercise your rights, email joelpgiblett@gmail.com. Please include only the information needed for your request.
General enquiries and appointments
The enquiry form collects your first and last name, email address and message so Dr Giblett can understand and respond to your enquiry. Using the form is optional. If you use it, these fields are required to identify and answer your message. Messages are delivered to Dr Giblett’s Gmail inbox, which only he accesses, and read using Apple Mail.
Please do not send symptoms, diagnoses, test results, medical records or other clinical details through the general enquiry form. Attachments are not accepted. The form is for non-urgent general or academic correspondence, not medical advice or emergency care. For private appointments, use the Rowan Suite’s booking service, which provides its own privacy information.
If clinical information is sent despite this warning, Dr Giblett will review it for safety and direct the sender to the appropriate clinical service. Information needed for care will be handled in the appropriate clinical record, rather than treated as routine correspondence subject to the 90-day enquiry period. This does not make the form an urgent clinical service.
Why information is used
For ordinary general enquiries, we rely on our legitimate interests in responding to correspondence. We also have a legitimate interest in operating a secure website and preventing spam and misuse. Form submission is not treated as blanket consent for other uses. General enquiries are not used for mailing lists or advertising.
Clinical information requires additional protection and is handled according to the purpose of the clinical care and the professional duties of the treating service. This website’s general-enquiry arrangements do not define the lawful basis or retention policy for a hospital’s clinical records.
Service providers and information collected automatically
HostGator provides website hosting and the website’s outgoing email service. The hosting account’s data centre is in Texas, USA. Server and security systems may record technical information such as IP addresses, requested pages, dates, browser information and errors to operate and protect the service.
WPForms provides the form software. Cloudflare Turnstile checks for automated or abusive submissions using technical signals including IP address and browser information. Cloudflare describes its processing in its Turnstile privacy notice. These checks are separate from clinical decisions about your care.
Enquiry emails are delivered through Gmail under Google’s consumer terms and privacy policy. This is not a Google Workspace mailbox. Google does not offer a data-processing agreement for consumer Gmail. Please use the clinical service’s agreed communication route for medical information.
Processing outside the UK
Hosting in the USA and the use of Google and Cloudflare mean information may be processed outside the UK. Newfold, HostGator’s parent group, publishes a data-processing addendum that includes contractual provisions for UK transfers. Google and Cloudflare explain their international processing in their privacy information. You can contact Dr Giblett for details about the arrangements relevant to your information.
Cookies and browser technology
The contact form uses security checks to reduce spam and automated submissions. These checks may use cookies or similar browser technology, as described in Cloudflare’s privacy information. WordPress also uses cookies for administrator sign-in. No optional analytics or advertising service has been added as part of this website rebuild. Links to other organisations take you to sites with their own privacy and cookie policies.
How long information is kept
Resolved general enquiries and relevant sent replies are kept for 90 days after resolution, then moved to Gmail’s Bin. Messages remain there for up to a further 30 days before Gmail automatically permanently deletes them. The same review includes any separate copies under Dr Giblett’s control. This is a manual process; Apple Mail does not determine when an enquiry is resolved.
Clinical records are handled separately by the appropriate treating service. Technical logs, security records and backup copies have different purposes and are not covered by the general-enquiry deletion period. Deleting a message from the mailbox does not establish when every provider-held backup copy is erased; providers describe their retention in their privacy information.
Your rights and concerns
Depending on the circumstances, you can request access to or correction of your information, deletion, or restriction of its use. You can object to processing based on legitimate interests. Other rights, including portability or withdrawal of consent, apply where their legal conditions are met. We may need proportionate information to verify your identity before answering a request.
Please contact Dr Giblett using the email above if you have a privacy concern. You also have the right to complain to the Information Commissioner’s Office.
Last updated: 5 November 2026. This notice will be updated when the website’s handling of personal information changes.