Privacy Policy

Last updated: October 4, 2025

Who We Are

Myriknas Ltd is the Data Controller responsible for your personal data collected through this website and our medical services.

Myriknas Ltd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website steliosmaternity.co.uk (the "Service").

Our registered office is located at: Lynton House, 7-12 Tavistock Square, London, WC1H 9BQ

Company Registration Number: 15595161

If you have any questions about this Privacy Policy, please contact us at myriknas@gmail.com.

Information We Collect

Information You Provide to Us

• Contact Information: When you contact us through forms, email, or phone, we may collect your name, email address, phone number, and any message you send us
• Appointment Requests: When you request appointments, we collect your contact details and information about your enquiry
• Medical Information: When you become a patient, we collect relevant medical history, symptoms, test results, and other health information necessary for your care
• Newsletter Subscriptions: If you subscribe to our newsletter, we collect your email address and any preferences you provide

Information We Collect Automatically

• Analytics Data: We use Google Analytics to collect information about how you use our website, including:
  • Pages you visit and time spent on each page
  • How you arrived at our website (referral sources)
  • Your approximate location (country/city level)
  • Device and browser information
  • IP address (anonymized)
• Cookies: We use cookies and similar tracking technologies to enhance your experience and analyze website usage

How We Use Your Information

We use the information we collect to:

• Provide medical consultation and treatment services
• Respond to your enquiries and provide medical consultation services
• Schedule and manage appointments
• Maintain medical records in accordance with GMC guidance
• Send you newsletters and updates about our services (with your consent)
• Improve our website and services
• Analyze website traffic and user behavior
• Comply with legal obligations
• Protect against fraud and abuse

Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

Medical Records and Treatment

• Contract: Processing necessary for providing medical services you have requested
• Legal Obligation: Retention of medical records as required by GMC and UK law
• Vital Interests: Emergency medical situations where your life or health is at risk
• Special Category Data: Medical information is classified as special category personal data under UK GDPR. We process this data under Article 9(2)(h) (health or social care) for the provision of healthcare services and medical diagnosis

Website and Marketing

• Consent: For newsletter subscriptions and non-essential cookies
• Legitimate Interests: For website analytics, improving our services, and responding to enquiries

Medical Records and Clinical Data

When you become a patient, we create and maintain medical records in accordance with:

• General Medical Council (GMC) guidance on confidentiality and record keeping
• UK GDPR and Data Protection Act 2018
• Professional standards for obstetric and gynaecological care

Medical records include consultation notes, test results, treatment plans, imaging, and correspondence with other healthcare providers. These records are:

• Stored securely in electronic and/or paper format with appropriate access controls
• Retained for a minimum of 8 years from last contact, or until the child reaches 25 years of age for obstetric records (whichever is longer)
• Shared only with your explicit consent, except where legally required or in your vital interests
• Accessible to you upon written request

Cookies and Tracking Technologies

Essential Cookies

These cookies are necessary for our website to function properly and cannot be disabled.

Analytics Cookies

We use Google Analytics to understand how visitors use our website. These cookies collect anonymous information including number of visitors, pages visited, traffic sources, and user behavior patterns.

Cookie Consent

We will ask for your consent before placing non-essential cookies on your device. You can withdraw your consent at any time by adjusting your browser settings or contacting us.

Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party companies that help us operate our website and services
• Healthcare Providers: With your consent, we may share information with other healthcare professionals involved in your care
• Legal Requirements: When required by law, court order, or to protect our rights

Categories of Data Processors

We work with the following categories of data processors who may access your personal data:

• Analytics and website providers (e.g., Google Analytics)
• Email communication services
• Practice management software providers
• Secure file storage and backup services
• Payment processing providers (for private patients)
• IT support and maintenance providers

All data processors are carefully selected and bound by data processing agreements to ensure your data is protected.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise these rights, please contact us at myriknas@gmail.com. We will respond within one month of receiving your request.

Please note: Your right to erasure does not apply to medical records which we are legally required to retain under GMC guidance and UK law.

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

• Notify the Information Commissioner's Office (ICO) within 72 hours where required by law
• Inform you directly if the breach poses a high risk to your rights and freedoms
• Take immediate steps to contain and remedy the breach
• Implement additional safeguards to prevent future occurrences

Automated Decision Making

We do not use automated decision making or profiling in relation to your personal data or medical care. All medical decisions are made by qualified healthcare professionals.

Children and Minors

We do not knowingly collect personal data from individuals under 16 through our website without parental consent, except where required for medical care. If you are under 16, please ask a parent or guardian before providing any personal information.

Marketing Communications

We will only send you marketing communications if you have actively opted in to receive them. We do not send marketing to patients unless explicit consent has been provided.

If you have consented to receive marketing communications from us, we will send you newsletters and updates about our services. You can unsubscribe from marketing emails at any time by:

• Clicking the unsubscribe link in any email we send you
• Contacting us directly at myriknas@gmail.com
• Adjusting your preferences in your account settings (if applicable)

Unsubscribing from marketing will not affect service-related communications such as appointment confirmations.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (SSL/TLS)
• Secure storage of medical records with access controls
• Regular security audits and updates
• Staff training on data protection and confidentiality
• Strict access controls limiting who can view your information

Data Storage Location: Medical records are stored on secure servers located within the United Kingdom. Website analytics data may be processed by third-party providers with data centers in the UK/EU, protected by appropriate safeguards under UK GDPR.

However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Website enquiries: 3 years from last contact
• Medical records: Minimum 8 years from last contact, or until the child reaches 25 years of age for obstetric records (whichever is longer)
• Financial records: 7 years as required by UK tax law
• Analytics data: As determined by Google Analytics settings (typically 26 months)
• Website cookies: Varies by cookie type (from session-based to 2 years)

International Data Transfers

Some of our service providers (including Google Analytics) may process your data outside the UK. When this occurs, we ensure appropriate safeguards are in place, such as adequacy decisions by the UK government or standard contractual clauses.

Medical records are stored exclusively within the UK and are not transferred internationally.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

For significant changes affecting how we use your medical data, we will notify you directly via email where possible.

Other Important Policies

For information about appointment policies, cancellation terms, fees, and complaints procedures, please see our Terms & Conditions.