Privacy Policy

Last updated: 4 March 2026

Who we are

Myriknas Ltd is the Data Controller responsible for your personal data collected through this website and our medical services.

Myriknas Ltd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website steliosmaternity.co.uk or use our private obstetric and gynaecological services.

Our registered office is located at: Lynton House, 7-12 Tavistock Square, London, WC1H 9BQ

Company Registration Number: 15595161

Myriknas Ltd is registered as a data controller with the Information Commissioner's Office (ICO), registration number ZB686254.

If you have any questions about this Privacy Policy, please contact us at myriknas@gmail.com.

Information we collect

Information You Provide to Us

• Contact information: When you contact us through forms, email, or telephone, we may collect your name, email address, phone number, and any message you send us
• Appointment requests: When you request an appointment, we collect your contact details and information about your enquiry
• Medical information: When you become a patient, we collect relevant medical history, symptoms, test results, and other health information necessary for your care

Information We Collect Automatically

• Analytics data: We use Google Analytics 4 (GA4) with Consent Mode v2 to collect anonymised information about how visitors use our website. Analytics data is only collected if you give your consent via our cookie banner. See the Cookies & Analytics section for full details
• Cookies: We use cookies to ensure the website functions correctly and, with your consent, to analyse website usage

How we use your information

We use the information we collect to:

• Provide medical consultation and treatment services
• Respond to your enquiries
• Schedule and manage appointments
• Maintain medical records in accordance with GMC guidance
• Process payments and liaise with private medical insurers on your behalf where authorised
• Send service-related communications such as appointment confirmations and clinical correspondence
• Improve our website and services through anonymised analytics
• Comply with our legal and regulatory obligations
• Protect against fraud and abuse

Legal basis for processing

We process your personal data under the following legal bases under UK GDPR:

Medical Records and Treatment

• Contract: Processing necessary for providing the medical services you have requested
• Legal obligation: Retention of medical records as required by GMC guidance and UK law
• Vital interests: Emergency medical situations where your life or health is at immediate risk
• Special category data: Medical information is classified as special category personal data under UK GDPR. We process this under Article 9(2)(h) - health or social care - for the provision of healthcare services and medical diagnosis

Website and Communications

• Consent: For analytics cookies and non-essential tracking
• Legitimate interests: For improving our services and responding to general enquiries
• Contract: For service-related communications including appointment confirmations and billing correspondence

Medical records and clinical data

When you become a patient, we create and maintain medical records in accordance with:

• General Medical Council (GMC) guidance on confidentiality and record keeping
• UK GDPR and the Data Protection Act 2018
• Professional standards for obstetric and gynaecological care

Medical records include consultation notes, test results, treatment plans, imaging, and correspondence with other healthcare providers. These records are:

• Stored securely in electronic and/or paper format with strict access controls
• Retained for a minimum of 8 years from last contact, or until the child reaches 25 years of age for obstetric records (whichever is longer)
• Shared only with your explicit consent, except where legally required or in your vital interests
• Accessible to you upon written request

Cookies & Analytics

Essential Cookies

These cookies are necessary for our website to function correctly and cannot be disabled. They do not collect personal information and are set in response to actions you take, such as accepting or declining the cookie banner.

Analytics Cookies - Google Analytics 4 with Consent Mode v2

We use Google Analytics 4 (GA4). We have implemented Google's Consent Mode v2, which means GA4 loads with all data collection denied by default. When you decline cookies, GA4 operates in a cookieless mode: no identifying cookies are placed on your device and no personal data is collected. Analytics cookies are only set if you actively accept via our cookie banner.

When consent is given, GA4 collects anonymised information including:

• Number of visitors and sessions
• Pages visited and time spent on each page
• How you arrived at our website (referral sources)
• Approximate location (country and city level only)
• Device type and browser

GA4 does not store IP addresses. IP data is anonymised automatically by Google before any data is recorded, and we have no access to it. The cookies set when consent is given are:

• _ga — distinguishes unique visitors; retained for 2 years
• _ga_G-FP4RN75RR4 — stores session state; retained for 2 years

We do not use Google Ads, remarketing, or any advertising features. The ad-related consent signals (ad_storage, ad_user_data, ad_personalisation) are permanently denied in our configuration.

Analytics data is processed by Google LLC and may be transferred outside the UK. Google's data processing terms incorporate standard contractual clauses approved by the ICO.

You can withdraw analytics consent at any time by declining cookies via our banner, adjusting your browser settings, or installing the Google Analytics Opt-out Browser Add-on.

Cookie Consent

We ask for your consent before placing any non-essential cookies on your device. You can withdraw or change your consent at any time using our cookie banner or by adjusting your browser settings.

Browser Local Storage

Some interactive tools on this website save data directly in your browser's local storage to improve your experience. This data is stored only on your device and is never transmitted to our servers. The following tools use local storage:

• Birth Plan Tool: Saves your birth plan answers so you can return and continue where you left off. Stored under the key stelios_bp_v2.
• Resources Hub: Saves your due date so the hub can show content relevant to your stage of pregnancy. Stored under the key stelios_hub_due.

This data remains on your device until you clear your browser's local storage or use the "Clear saved data" option within the tool. It contains no personally identifiable information beyond what you choose to enter.

Data sharing and disclosure

We may share your information with:

• Other healthcare providers: With your consent, relevant clinical information may be shared with healthcare professionals involved in your care, such as your GP, referring specialists, or hospital teams at The Kensington Wing or The Chelsea Wing
• Private medical insurers: Where you are covered by private medical insurance and have authorised us to liaise with your insurer, we will share information necessary to process your claim, including diagnosis codes, treatment dates, and clinical summaries
• Service providers: Third-party companies that help us operate our website and practice
• Legal requirements: When required by law, court order, or to protect our legal rights

Categories of Data Processors

We work with the following categories of data processors who may access your personal data:

• Analytics and website providers (Google Analytics 4)
• Email communication services
• Practice management software providers
• Secure file storage and backup services
• Payment processing providers
• IT support and maintenance providers

All data processors are bound by data processing agreements to ensure your data is protected in accordance with UK GDPR.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you (a Subject Access Request)
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request that we limit how we process your data
• Right to data portability: Request transfer of your data to another provider
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where consent is the legal basis, including for analytics cookies

To exercise any of these rights, please contact us at myriknas@gmail.com. We will respond within one month of receiving your request.

Please note: Your right to erasure does not apply to medical records which we are legally required to retain under GMC guidance and UK law. We will always explain any limitations on your rights clearly and in writing.

Data security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (SSL/TLS) for all website communications
• Secure storage of medical records with strict access controls
• Regular security reviews and software updates
• Staff awareness of data protection and confidentiality obligations
• Access to personal information limited to those with a genuine clinical or administrative need

Data storage location: Medical records are stored on secure servers within the United Kingdom. Website analytics data is processed by Google under data processing terms that include standard contractual clauses approved by the ICO.

No internet transmission is completely secure, and we cannot guarantee absolute security. However, we take all reasonable steps to protect your information.

Data retention

We retain your personal information only for as long as necessary for the purposes described in this policy:

• Website enquiries: 3 years from last contact
• Medical records: Minimum 8 years from last contact, or until the child reaches 25 years of age for obstetric records (whichever is longer)
• Financial records: 7 years as required by UK tax law
• Analytics data: Up to 14 months for event-level data as configured in our GA4 account; no analytics data is collected unless consent has been given
• Analytics cookies: 2 years from the date consent is given, or until consent is withdrawn
• Essential cookies: Session-based or up to 1 year depending on function

International data transfers

Some of our service providers, including Google Analytics 4, may process your data outside the UK. When this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the ICO.

Medical records are stored exclusively within the UK and are never transferred internationally.

Data breach notification

In the unlikely event of a data breach affecting your personal information, we will:

• Notify the Information Commissioner's Office (ICO) within 72 hours where required by law
• Inform you directly if the breach poses a high risk to your rights and freedoms
• Take immediate steps to contain and remedy the breach
• Implement additional safeguards to prevent future occurrences

Automated decision making

We do not use automated decision making or profiling in relation to your personal data or medical care. All medical decisions are made by qualified healthcare professionals.

Children and minors

We do not knowingly collect personal data from individuals under 16 through our website without parental or guardian consent, except where required for medical care. If you are under 16, please ask a parent or guardian before providing any personal information through this website.

Where we provide care involving a baby or child (including obstetric and neonatal care), clinical records are maintained in accordance with the extended retention periods described above.

Marketing communications

We do not send marketing communications. If this changes in future, we will only ever contact you for marketing purposes if you have actively and separately opted in to receive such communications. You can withdraw marketing consent at any time by contacting us at myriknas@gmail.com. Withdrawing marketing consent will never affect service-related communications such as appointment confirmations, clinical correspondence, or invoices.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and updating the date at the top of this page.

For significant changes affecting how we use your medical data, we will notify you directly by email where possible.

Other important policies

For information about appointment policies, cancellation terms, fees, and our complaints procedure, please see our Terms & Conditions.