Outpatient Clinics: Monday evenings and Thursday afternoons
This website is owned by Mr Abdusalam Abu-Own (MBChB, FRCS, PhD, CCST) and is provided and operated by him and his team. Mr Abdusalam Abu-Own and his team (“we”, “us, “our”) are committed to safeguarding the privacy of website visitors and service users. This Privacy Policy relates to how we collect, store and use the information you provide when using the website, www.abu-own.co.uk (“our website”, “this website”).
When you first visit our website, you will be asked to consent to the use of cookies, in accordance with the terms of this privacy policy. A full listing of the cookies used, why we use them and how you can manage or delete them is provided in the cookies section of this policy. ​​
​
INCLUDED IN THIS PRIVACY POLICY
INTRODUCTION
Mr A. Abu-Own is a Consultant General and Vascular surgeon working in Nuffield Health Hospital Ipswich, United Kingdom (UK). His GMC registration number is 3380400.
Mr A. Abu-Own bases his operations within the UK and as such, our website and its services are targeted towards residents of the UK. Therefore, we use the UK as our guiding law, as well as ensuring we incorporate GDPR 2016 into this privacy policy. If you reside from elsewhere in the world and wish to browse the website, make contact, have a consultation or receive treatment then you should be aware that our laws (including those relating to privacy) may differ with the laws of your country of residence. Those who choose to access this website from other locations are responsible for compliance with local laws if and to the extent local laws are applicable.
Mr A. Abu-Own runs his private clinic from the Nuffield Health Ipswich Hospital, Foxhall Road, Ipswich, IP4 5SW, where he works as an independent practitioner. Nuffield Health Ipswich Hospital provides private medical services to patients directly as well as taking referrals from G.Ps, external Consultants and local NHS Hospital Trusts. Nuffield Health Ipswich Hospital is one of a large national network of hospitals run by Nuffield Health. Nuffield Health is a Not-For-Profit, Healthcare Charity that provides clinical, fitness and wellbeing services to the general public, private organisations and the NHS.
DISCLAIMER
As Mr A. Abu-Own works closely with Nuffield Health Ipswich Hospital we have ensured that this Privacy Policy dovetails with that of Nuffield Health Ipswich Hospital. You can read Nuffield Health’s Privacy Policy in full here.
Because Mr Abu-Own runs his clinic and provides treatments at Nuffield Health Ipswich Hospital, it is best to assume that unless otherwise stated, any data collected through this website will be by default accessible to Nuffield Health.
In this document, we have focused on how we use data that you provide via our website. Therefore, to understand the full extent of the journey of your data, you should also consult Nuffield Health’s Privacy Policy. You will find several references to Nuffield Health’s privacy policy throughout this privacy policy for this reason.
For your convenience, due to the considerable overlap described above, there are some occasions in this privacy policy where some very basic references regarding the handling of data by Nuffield Health are made. These references were made with reasonable care and skill, are correct at the time of August 2020 to the best of our knowledge and are based on 1) content from Nuffield Health’s Privacy policy and 2) our experience with dealings with Nuffield Health.
Wherever references to Nuffield data handling are made, or wherever there is any overlap, you will always be provided with links to Nuffield Health’s Privacy Policy for further information and clarification. We make it very clear that we do not speak on behalf of Nuffield Health and any basic information provided in this privacy policy about Nuffield Health is merely intended as a helpful general guide and should by no means be relied upon alone to obtain a full understanding of how Nuffield Health uses data about its patients.
If you disagree with anything in this policy, or believe that there are any inaccuracies, then we would encourage you to get into contact with us and to let us know as soon as possible.
​
​
WEBSITE SECURITY
We assure you that we have taken all the necessary steps to ensure high levels of internet security for this website, for example, we use Secure Socket Layer (SSL) on this website – this means that any communication between your digital device’s web browser and our website is encrypted as part of our front line website security. However, it is important to be aware that the internet can be insecure, we, therefore, recommend that you do not use the online forms provided to relay Sensitive or Confidential information about yourself to us.
In the interests of respecting your privacy and information security, we prefer that Sensitive or Confidential information (where necessary) be provided to Mr A. Abu-Own during your private consultation.
The Data We Collect
You have three Form-Based options provided to you on this website. Two-forms provide you with the opportunity to contact Mr A. Abu-Own’s team. The third form is for feedback. We have also published the email address and phone number of the Hospital giving you total control on how you contact Mr A. Abu-Own, through the Hospital and his team.
Please note: When communicating with Mr A. Abu-Own through this website, by email or by phone, your messages and communications will be received by Mr Abu-Owns’ team or a member of the Hospitals Staff in the first instance – these messages and communications will then be passed to him as necessary.
When using the Appointment Request Form, we will collect
-
Your Name in Full
-
The Nature of your condition, through a drop-down menu.
-
Your Phone Number
-
Your Email Address
-
We have provided a Comments area where you can elaborate on your condition.
-
This webform will prompt you not to relay Confidential or Sensitive Information in the comment section. This is because there is a risk that the internet might be insecure despite the steps we have taken to ensure the highest levels of security.
-
-
Your Preferred Payment Method
-
A choice of how you would like to receive a response, which includes Phone or Email.
-
The legitimate reason for collecting this information is so that we can respond to you when arranging an appointment date and time and any other information you might require efficiently and effectively; it also allows us to manage and maintain quality care standards.
​
When using the Enquiries Form we will collect
-
Your name in Full
-
Your Email Address
-
Your Phone Number
-
The content of your question, enquiry or message.
-
This webform will prompt you not to relay Confidential or Sensitive Information, in the comment section. This is because there is a risk that the internet might be insecure despite the steps we have taken to ensure the highest levels of security.
-
-
Again, you will be given a choice regarding your preferred contact method so that we can effectively respond to your enquiry. The choices are Email or Phone.
-
Our legitimate reason for collecting this information is so that we can respond to you with answers to any questions you may have asked when using this form and any other information you might require efficiently and effectively; it also allows us to manage and maintain quality care standards.
​
When using the Feedback Form
-
The Feedback form is intended to collect information Anonymously. You will not be asked to provide your name or any other personally identifiable information. We do this because we wish to encourage patients to speak their minds as freely as possible.
-
You will be presented with a check-box list of options to choose from. This allows you to share your experience of
-
the treatment you have received
-
the quality of care
-
the hospital you attended for your treatment,
-
the nature of your condition.
-
-
You will also have the opportunity to provide additional comments in your own words.
-
This webform will prompt you not to relay Confidential or Sensitive Information, in the comments sections. This is because there is a risk that the internet might be insecure despite the steps we have taken to ensure the highest levels of security.
-
In the interests of keeping the form anonymous, a prompt is also included to ask patients not to include any personally identifiable information.
-
-
When we collect the Feedback Form Data, we will use it to analyse
-
our performance
-
create a proof-based record of our Quality Care, and service
-
if in this analysis we find criticism we use the criticism to learn and improve our service as part of our commitment to the continuous improvement of patient care.
-
When Emailing Mr Abu-Own’s Clinic, we will collect
-
Your Name – as provided by you.
-
Your email address
-
The content of your email – questions, requests, advice, etc.
-
Any other information which you freely provide to Mr Abu-Own Team, through the content of your email.
-
While we can assure you that our Clinic and Hospital systems have high levels of security systems in place, we can not be responsible for unauthorised data breaches and so again we ask you not to provide sensitive or confidential information in your email.
-
As your primary out-reach to Mr Abu-Owns’ clinic and team has been made by direct email, we will usually respond to your email by email, unless you ask us to phone you, in which case please provide us with your phone number.
-
Our legitimate reason for collecting this information is so that we can respond to any questions, queries, requests or information provided, in line with the content of your email.
-
For more information, please visit Nuffield Health’s Privacy Policy.
​
When contacting Mr Abu-Owns’ Clinic by phone
-
Your call will be answered by a member of the Nuffield Health Ipswich Hospital reception team, who will ask you how they can help you. You may be transferred to a different member of staff within Nuffield Health Ipswich Hospital to help better serve your call. If appropriate, you may also be directed to Ms Vicky Handy (Mr A. Abu-Own’s secretary).
-
To help manage your call, you may be asked for your
-
Name in Full
-
The nature of your enquiry
-
The best way to contact you (as applicable)
-
Any other necessary information required by Mr Abu-Own or the Hospital to prioritise appointments, treatments and provide you with quality care.
-
-
Please note: In the interests of training and continually improving their services, calls to Nuffield Health and its agents may be monitored or recorded.
-
For more information, please visit Nuffield Health’s Privacy Policy.
WHEN DO WE COLLECT DATA ABOUT YOU
We collect data about you when
-
You interact with any of the forms you have completed and submitted from our website
-
You email or phone us
-
When you become a patient of Mr Abu-Owns at the Nuffield Health Ipswich Hospital.
For information on when your data is collected by Nuffield Health, please refer to Nuffield Health’s Privacy Policy.
​
WHY WE NEED YOUR DATA
-
We need to collect this basic data from you such as your name and contact information and any additional information you willingly give to Mr Abu-Owns’ team so that he and/or his team can respond efficiently and effectively.
-
We need to collect this basic data to provide you with answers to your questions or enquiries and/or to inform you of your initial and/or subsequent appointment times and dates and to provide you with any pertinent instructions before your treatment.
-
To follow up with after-care as necessary.
-
For information on why Nuffield needs your data, please refer to Nuffield Health’s Privacy Policy.
​
​
DATA SHARING
-
Mr Abu-Own is a consultant surgeon and works for The Nuffield Health Ipswich Hospital.
​
-
In addition to being assigned clinical cases by the Hospital, Mr Abu-Own can take private client/patients of his own. When doing so he is legally and contractually bound to share patient data with the hospital.
-
For example – If Mr Abu-Own determines that the best course of action for your treatment is to undertake a surgical procedure – he will need to share your details and the details of the surgical procedure with his surgical team and the Hospitals’ Theatre team.
-
This is done for the smooth running of the hospital, and to avoid surgical cancellations.
-
This ensures the best care and outcomes for you.
-
-
​
-
On admission to Nuffield Health Ipswich Hospital, you will be asked to read and sign consent forms – this will provide the written prior consent needed by the Hospital to share your data as part of the Hospitals’ duty of care.
-
All healthcare service providers are legally obligated to share the minimum necessary data with relevant named individuals and/or organisations, such as your GP, the referring consultant, the referring NHS Trust Hospital, and your insurance company if you are a Private Patient.
-
Nuffield Health’s Privacy Policy includes a section on data sharing. You can read it here.
-
​
-
As a private patient and where your insurance company is paying for your treatment in part or in full, (dependent on your insurance policy), in accordance with Nuffield health Ipswich Hospitals’ Privacy Policy, it may necessary to share information about your diagnosis, treatment, required medical procedures and/or prognosis with your insurance company along with the invoice for the treatment you received.
-
Communications with your insurers are mostly managed by the Nuffield Health Ipswich Hospital team, although there may be occasions where Mr Abu-Owns’ team may communicate to your insurance company directly.
-
Please see our Terms & Conditions for more detailed information about how a medical insurance claim for your treatment is managed, and to ensure you have everything in place with your insurance company prior to admission.
-
If you are not sure about the Hospital’s Data Sharing Policy, please feel free to ask for more information at any time during your consultation and/or treatment journey. You should also consult Nuffield Health’s Privacy Policy, which includes a section on Data Sharing.
-
DATA RETENTION
-
Data retention periods are governed by Nuffield Health’s Privacy Policy.
-
The guidelines provided by the hospitals’ policy relates exclusively to individuals who have become direct or referred patients of the hospital.
-
Mr Abu-Own is required by his contract with Nuffield Health Ipswich Hospital to abide by the Hospitals’ Privacy Policy.
-
In all cases where your enquiry through this website results in you becoming a patient of Mr Abu-Own, the data retention period unless otherwise advised will comply with the Hospitals Privacy Policy, which is stated as 8-years.
-
-
When an individual contacts Mr Abu-Owns’ clinic for help or advice using this website but do not book an appointment for a consultation and/or subsequent treatment by Mr Abu-Own at the Hospital, the data will be held securely by Mr Abu-Owns’ team for a period of 12-months before being securely destroyed in accordance with the UK’s Data Protection Act 2018 and the EU’s GDPR 2016.
​
MARKETING
-
Mr Abu-Own does not use your data for Marketing Purposes, however, the Nuffield Health Ipswich Hospital might, dependent on whether or not you have given the hospital prior consent in writing, to contact you for marketing purposes.
-
Please see Nuffield Health’s Privacy Policy for more information.
​
​
CUSTOMER SERVICES
-
If you have any Customer Services questions or concerns which you would like to be addressed, and where the forms on this website do not meet your needs, we would like to offer you two options.
-
Nuffield Health Ipswich Hospital Reception
-
Phone on 01473 279100
-
Appointments: 01473 279123
-
By Post or In Person: Nuffield Health Ipswich Hospital, Foxhall Road, Ipswich. IP4 5SW
-
-
Alternatively, contact Mr Abu-Own’s Secretary - Ms Vicky Handy
-
Phone on 01473 279137
-
Post: Ms Vicky Handy, Nuffield Health Ipswich Hospital, Foxhall Road, Ipswich, IP4 5SW.
-
-
COOKIE POLICY
This website uses cookies, primarily to ensure the security and stability of this website and to enhance your experience when visiting this website. You will be asked to accept our cookies on your first visit to this site. By accepting and continuing to browse our website, you are agreeing to our use of cookies.
WHAT ARE COOKIES
-
A cookie is a tiny text file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server (website).
​
-
Cookies may be classified according to their lifespan:
-
A persistent cookie will be stored by a web browser and will remain valid until its set expiry duration unless deleted by the user before the expiry.
-
A session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
-
​
-
Cookies may also be classified according to their function. The most common classification system in use today, at least in English language websites, was proposed and developed by The UK International Chamber of Commerce (ICC). Their system relies on four classifications:
-
Strictly necessary cookies are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website. Without these cookies services you have asked for, like shopping baskets or e-billing, cannot be provided. They may be set automatically when pages load, or as a result of a user request that cannot be fulfilled without the use of the cookie. Generally these are session cookies that expire on closing the browser but not always.
-
Analytical/Performance cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works.
-
Functionality cookies allow the website to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features. For instance, a website may be able to provide you with local weather reports or traffic news by storing in a cookie the region in which you are currently located. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customise. They may also be used to provide services you have asked for such as watching a video or commenting on a blog. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites.
-
Targeting/Advertising cookies are used to deliver adverts more relevant to you and your interests They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. They are usually placed by advertising networks with the website operator’s permission. They remember that you have visited a website and this information is shared with other organisations such as advertisers. Quite often targeting or advertising cookies will be linked to site functionality provided by the other organisation.
-
WHAT COOKIES DO WE USE
-
In the table below, we provide you with the names of the cookies we use in our website, the purpose of each cookie, how long each cookie is stored on your device and the cookie function type.
​
Cookie Name
Purpose
Duration
Type
XSRF-TOKEN
hs
SSR-caching
_wixCIDX
_wix_browser_sess
consent-policy
​
smSession
TS*
bSession
fedops.logger.sessionId
​
Google Analytics
wixLanguage
Used for security reasons
Used for security reasons
Used to indicate the system from which the site was rendered
Used for system monitoring / debugging
Used for system monitoring / debugging
Used for cookie banner parameters
Used to identify site logins
Used for security and anti-fraud reasons
Used for system effectiveness measurement
Used for stability / effectiveness measurement
Measures how site visitors use and navigate the site
Used on multilingual websites to save user language preference
Session
Session
1 minute
​
3 months
Session
​
12 months
​
Session
Session
​
30 minutes
​
12 months
​
Session
​
12 months
Strictly necessary
Strictly necessary
Strictly necessary
​
​
Strictly necessary
Strictly necessary
​
Strictly necessary
​
Strictly necessary
Strictly necessary
Strictly necessary
Strictly necessary
Analytical
​
​
Functionality
-
We use a mix of Persistent and Session Cookies as shown in the table above.
-
The cookies we use on this website do not contain any information that personally identifies a user.
-
We do not use any targeting/advertising cookies in our website and we do not use any cookies for the purposes of advertising (this includes both direct advertising and indirect through sharing with third parties).
​
​
HOW TO MANAGE & DELETE COOKIES
-
Most browsers allow you to refuse, accept and/or delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can, however, obtain up-to-date information about blocking and deleting cookies for each browser via the following links:
-
https://support.google.com/chrome/answer/95647?hl=en (Google Chrome);
-
https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Mozilla Firefox);
-
http://www.opera.com/help/tutorials/security/cookies/ (Opera);
-
https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer); and
-
https://support.microsoft.com/en-us/Search/results?query=Microsoft+edge+deleting+cookies (Microsoft Edge).
-
​
-
Please be aware that blocking cookies may have a negative impact upon the usability of this website. If you decide to block all cookies (including essential cookies) the website may not work as intended.
CHANGES TO THIS POLICY
-
This policy is updated from time to time and as new online services are engaged.
-
You are invited to review this policy for clarity and to be made aware of any changes.
YOUR DATA RIGHTS
-
Under the UK’s Data Protection Act 2018, and the EU’s General Data Protection Regulation (GDPR) 2016, you have certain rights under both acts to request what is known as a Subject Data Request (SAR).
​
-
Both these items of legislation can be complex, we have provided a summary of your rights below, and again refer you to Nuffield Health’s Privacy Policy for a more detailed understanding of how the Hospital manages, data, SAR, and the government guidance the hospital has received in light of the Covid-19 Pandemic.
​
-
Your key rights include:
-
the right to access your data; It is recommended that you keep copies of all your correspondence with Mr Abu-Own, his team and the Hospital; including any written responses
-
the right to rectify any errors or inaccuracies in your data;
-
the right to request the erasure of your data;
-
There may be certain circumstances where this may not be possible, especially when Private Medical Health Care Organisations & Practitioners are required by law to keep medical records for 8-years.
-
Erasing your data can also include you changing your mind about receiving marketing materials from the Hospital – in this instance use the “Unsubscribe Link” which is found in the footer of every marketing communication. Unsubscribing will immediately and automatically remove your name and email address from the Hospitals Mailing list.
-
Please Note - our website does not use mailing lists. Wherever we ask for an email address, this is for the purpose of responding to enquiries or appointment requests as described in “The Data we Collect” section of this privacy policy. You will not receive any marketing emails from Mr Abu-Own and his team.
-
-
the right to restrict processing; While this is a right – Mr Abu-Own and his team will only process such data as is necessary to provide you with medical care and treatment, and process payment of the treatment you have received. Beyond that, there is no reason for Mr Abu-Own to process your data once you have been discharged. Please see Nuffield Health’s privacy policy for how data is processed at Nuffield Health.
-
Under legislation which governs Private Medical Health Care Organisations and Practitioners, your medical records will be securely stored for the legislated period of 8-years.
-
-
the right to object to processing; While you have the right to object to the processing of your data, however, please bear in mind that the data processed by Mr Abu-Own and his team is purely to ensure you receive the best possible medical care.
-
You have the right to object to our processing of your personal data for scientific research or statistical purposes on grounds relating to your particular situation unless the processing is necessary for the performance of a task carried out for reasons of public interest.
-
Please note any data that might be processed for the purpose of scientific research or statistical purposes will be anonymised.
-
-
the right to data portability; Mr Abu-Own’s website is not a “membership” or “subscription” led website, so while this is one of your rights under Data Protection Legislation in the UK & EU, this section does not apply in the context of Mr Abu-Own’s services to you, through this website.
-
the right to complain to a supervisory authority; If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection.
-
The Supervisory Authority in the UK is the Information Commissioner's Office (ICO). https://ico.org.uk/make-a-complaint/
-
The guidance offered by the ICO, advises that before the ICO will investigate a complaint, the person making the complaint must have first approached the Data Protection Officer for Mr Abu-Own through the Hospital detailing their concerns or complaint.
-
Mr Abu-Owns’ Data Protection Officer’s name and contact details follow below.
-
-
the right to withdraw consent. To the extent that the legal basis for the processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
-
Again we would like to remind you that under legislation which governs Private Medical Health Service Providers and Practitioners Mr Abu-Own and the Hospital are legally bound to store your medical records for 8-years after discharge.
-
Where this clause may relate to having previously given consent to the hospital to receive hospital marketing material – all you have to do is click the “unsubscribe link” in the footer of any of the marketing material you have received and your will immediately and automatically be removed from that list.
-
-
​
-
How to exercise your data rights
-
You may exercise any of your rights concerning your personal data by written notice to our Data Protection Officer – see below.
-
DATA PROTECTION OFFICER
The data protection officer for Mr A. Abu-Own is Ann Vial.
Tel: 01473 279 175
Post: Nuffield Health Ipswich Hospital, Foxhall Road, Ipswich IP4 5SW
​
LAST UPDATED – 28TH August 2020