Last Updated: 25 December 2025
Who We Are (Data Controller)
This website is operated by Mr Mangattil Rajesh, Consultant Spine Surgeon and Medico-Legal Expert, trading as medicolegalspineexpert.co.uk.
For the purposes of data protection law, we are the Data Controller responsible for the personal data processed through this website.
We are registered with the General Medical Council (GMC Registration Number: 4609245) and comply with all applicable data protection legislation, including:
The Data Protection Act 2018
The UK General Data Protection Regulation (UK GDPR)
Personal Data We Collect
Depending on how you interact with this website, we may collect the following categories of personal data:
a) Identity and Contact Data
-
- Name
-
- Organisation or law firm
-
- Email address
-
- Telephone number
b) Correspondence Data
-
- Information you provide when contacting us via enquiry forms, email, or telephone
-
- Details relating to medico-legal enquiries or professional correspondence
c) Technical and Usage Data
-
- IP address
-
- Browser type and version
-
- Operating system
-
- Pages visited and time spent on the website
Important clarification
This website does not collect or store full medical records or patient clinical notes through its public pages. Any medico-legal or clinical information is handled separately and only on formal instruction, in accordance with professional and legal obligations.
How We Collect Personal Data
We collect personal data through:
Automated website analytics tools
Contact and enquiry forms
Direct email or telephone contact
Cookies and similar tracking technologies
Lawful Basis for Processing
We process personal data only where permitted by law. The lawful bases relied upon include:
Under Article 6 UK GDPR:
-
- Consent (Article 6(1)(a)) – where you submit an enquiry or accept cookies
-
- Contract (Article 6(1)(b)) – where processing is necessary in connection with professional or medico-legal services
-
- Legal obligation (Article 6(1)(c)) – where required for regulatory, court, or legal compliance
-
- Legitimate interests (Article 6(1)(f)) – for website security, analytics, and service improvement
Where special category data is involved:
Article 9(2)(h) – processing for health or medico-legal purposes where applicable
Article 9(2)(f) – processing necessary for the establishment, exercise, or defence of legal claims.
How We Use Your Personal Data
We use personal data to:
Comply with legal, regulatory, and professional obligations
Respond to enquiries and professional correspondence
Provide medico-legal and expert witness services
Communicate with solicitors, insurers, or courts where instructed
Maintain website security and functionality
Improve website performance and user experience.
Data Sharing and Disclosure
We may share personal data only where necessary and lawful, including with:
-
- Solicitors and legal professionals (on instruction)
-
- Courts and tribunals (where legally required)
-
- Professional advisers and insurers
-
- IT service providers (hosting, email, security, analytics)
We do not sell personal data and do not permit third parties to use data for their own marketing purposes.
International Transfers
Personal data is primarily processed within the United Kingdom.
Where third-party services involve data transfers outside the UK, appropriate safeguards are in place to ensure compliance with UK GDPR.
Data Retention
We retain personal data only for as long as necessary and proportionate:
Technical and analytics data: retained for limited periods in accordance with service provider settings
Website enquiries: typically up to 12 months
Professional and medico-legal correspondence: retained in line with legal limitation periods and professional guidance
Your Data Protection Rights
Under UK GDPR, you have the right to:
-
- Request access to your personal data
-
- Request rectification of inaccurate or incomplete data
-
- Request erasure of personal data (where applicable)
-
- Request restriction of processing
-
- Object to processing based on legitimate interests
-
- Request data portability
-
- Withdraw consent at any time (where processing is based on consent)
To exercise these rights, please contact us using the details below.
Complaints
If you are concerned about how your personal data is handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://www.ico.org.uk
We would, however, appreciate the opportunity to address any concerns directly before you contact the ICO.
Cookies
This website uses cookies and similar technologies.
Further information about the cookies used, their purpose, and how to manage your preferences is available in our Cookie Policy.
Complaints
If you have any concerns about how we handle your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
Mr. Mangattil Rajesh
Consultant Spine Surgeon
GMC Registration: 4609245
Email: rajesh@spinesurgeon.london
Telephone: +44 20 3150 0259
Address: Princess Grace Hospital, 42-52 Nottingham Place, London
Website: medicolegalspineexpert.co.uk
Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect legal, regulatory, or operational changes.
The latest version will always be published on this page.