Privacy Policy

This Privacy Policy explains how Dr Shahed Islam (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you use our website at shahedislam.allied-health.co.

We are committed to ensuring that your privacy is protected and that your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Dr Shahed Islam is a Consultant Cardiologist providing private cardiology consultations at Circle Reading Hospital and Spire Dunedin Hospital, Reading, Berkshire. He is the data controller for personal information collected through this website.

Email: info@readingcardiology.life
Phone: +44 7385 832442
Website: shahedislam.allied-health.co
Addresses: Private Cardiology Clinic, Harley Street Medical Area, London W1G

2. Information We Collect

When you visit this website or submit an enquiry, we may collect and process the following types of personal data:

Your name, email address, and phone number
Information submitted through contact or appointment request forms, including your reason for enquiry or brief details of symptoms
Any additional information you choose to provide voluntarily
Technical data such as your IP address, browser type, device information, and pages visited on this website

We do not collect or store sensitive clinical or medical records through this website. Any clinical information shared during a consultation is handled separately under applicable medical confidentiality obligations.

3. How We Use Your Information

Your personal data is used only for the purposes for which it was provided. Specifically, we use it to:

Respond to your enquiries, appointment requests, and general contact submissions
Provide information about Dr Islam’s private cardiology services and clinic locations
Manage and facilitate the booking of private consultations
Improve the functionality and user experience of this website
Maintain the security and integrity of our online systems
Comply with applicable legal and regulatory obligations

4. Lawful Basis for Processing

Under the UK GDPR, we process your personal data on one or more of the following lawful grounds:

Consent — where you have provided explicit consent for us to contact you or process your information
Contract — where processing is necessary to arrange or fulfil a consultation appointment
Legal obligation — where we are required to process data to comply with applicable law or regulation
Legitimate interests — where processing is necessary for our legitimate business purposes and does not override your fundamental rights

5. How We Store and Protect Your Data

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, or alteration. These measures are reviewed and updated regularly.

Personal data submitted through this website is retained only for as long as necessary to fulfil the purposes described in this policy, or to meet any applicable legal or regulatory retention requirements. Where data is no longer needed, it is securely deleted or anonymised.

6. Sharing Your Information

We do not sell, rent, or trade your personal data to any third party.

Your information may be shared only in the following limited circumstances:

With trusted third-party service providers who support the operation of this website, subject to confidentiality agreements and data processing terms
With hospital administration staff at Circle Reading Hospital or Spire Dunedin Hospital, where necessary to facilitate your appointment
With legal or regulatory authorities where we are required to disclose information by law

7. Cookies and Tracking Technologies

This website may use cookies and similar technologies to support website functionality and to understand how visitors interact with our pages. Cookies are small text files stored on your device when you visit a website.

You can control or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of some areas of this website. Where required by law, we will request your consent before placing non-essential cookies.

8. Your Data Protection Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

The right to access your personal data and receive a copy of the information we hold about you
The right to request correction of any inaccurate or incomplete personal data
The right to request erasure of your personal data (the “right to be forgotten”), where no legitimate reason exists for us to continue holding it
The right to restrict or object to the processing of your personal data in certain circumstances
The right to data portability, where technically feasible
The right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal

To exercise any of these rights, please contact us at info@readingcardiology.life. We will respond to all valid requests within one calendar month.

9. Third-Party Links

This website may contain links to third-party websites, including hospital sites, NHS resources, or professional bodies. We are not responsible for the privacy practices or the content of those external websites.

We recommend reviewing the privacy policy of any third-party website you visit through a link on this site, as their data practices may differ from ours.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable data protection law. Any updates will be posted on this page, and the “Last updated” date at the top of the page will be revised accordingly.

We encourage you to review this page periodically to stay informed about how we protect your personal data.

11. Contact Us

If you have any questions about this Privacy Policy, how your personal data is handled, or wish to exercise any of your data protection rights, please contact us: