Plain-language summary: This website is mainly informational and collects very little data. If you submit a patient review or send an enquiry, the details you enter are sent securely to Mr Elboushi's email via Web3Forms and, for approved reviews, stored in a private Google Sheet. We do not use advertising cookies, we do not sell your data, and we do not track you across other websites.
1. Who we are
This privacy policy applies to vascusphere.co.uk, operated by Mr Amro Elboushi, Consultant Vascular and Endovascular Surgeon. For the purposes of UK data protection law, Mr Amro Elboushi is the data controller.
Contact: [email protected]
2. What data we collect and why
We collect personal data only when you actively provide it. The table below describes each situation.
| When | Data collected | Why | Legal basis (UK GDPR) |
|---|---|---|---|
| You submit a patient review | Name (first + last), email address (optional), star rating, treatment type, review text | To receive, moderate, and (if approved) display your review publicly on this website | Legitimate interests; consent (you choose to submit) |
| You send an enquiry via email | Your name, email address, and the content of your message | To respond to your enquiry | Legitimate interests; pre-contractual steps |
| You visit the website | Standard server logs (IP address, browser type, pages visited, timestamps) — via Cloudflare | Security, performance monitoring, and abuse prevention | Legitimate interests |
3. How your data is stored and processed
Patient reviews (Web3Forms)
Review submissions are processed by Web3Forms (web3forms.com/privacy), a third-party form backend. Web3Forms delivers your submission to Mr Elboushi's email address and does not retain form data beyond transmission. Only reviews that are explicitly approved are then stored in a private Google Sheet (accessible only to Mr Elboushi) and displayed on this website.
If your review is approved and published, your first name, last initial, star rating, treatment type, and review text are visible publicly on this website. Your email address is never published.
Google Sheets
Approved review data is held in a private Google Sheet accessible only to Mr Elboushi. Google's privacy policy applies: policies.google.com/privacy. The sheet is not published or shared publicly.
Cloudflare
This website is hosted on Cloudflare Pages. Cloudflare may process standard server log data (IP addresses, request headers) for security and performance purposes. Cloudflare's privacy policy: cloudflare.com/privacypolicy.
4. Cookies
This website does not use advertising, analytics, or tracking cookies. Cloudflare may set a technical security cookie (__cf_bm) to protect against bots — this is a strictly necessary cookie and does not track your activity across other websites. No cookie consent banner is required for strictly necessary cookies under UK PECR.
5. How long we keep your data
Approved reviews remain published until you request removal. Email enquiries are retained for as long as reasonably necessary to manage correspondence, typically no longer than two years. Server log data is retained by Cloudflare per their standard retention periods (typically up to 30 days).
6. Who we share data with
We do not sell, rent, or share your personal data with any third party for marketing purposes. Data passes only to the processors described above (Web3Forms, Google, Cloudflare) strictly for the purposes stated. We will disclose data if required to do so by law.
7. Your rights under UK GDPR
You have the following rights regarding your personal data:
To exercise any of these rights, email [email protected]. We will respond within one calendar month.
8. Data transfers outside the UK
Web3Forms and Google operate servers in various jurisdictions, which may include the EEA and the United States. Both organisations participate in frameworks that provide adequate protections for international transfers under UK GDPR. Cloudflare similarly operates a global network with appropriate transfer safeguards.
9. Children
This website is not directed at children under the age of 13 and we do not knowingly collect data from children. If you believe a child has submitted data through this website, please contact us and we will delete it promptly.
10. Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the website after a change constitutes acceptance of the revised policy.
11. Contact and complaints
For any privacy-related questions or to exercise your rights, contact: [email protected]
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
ico.org.uk/make-a-complaint · Helpline: 0303 123 1113