PRIVACY & DATA PROTECTION

Privacy Notice

Last updated: August 2026

This Privacy Notice explains how I collect, use and protect personal information in connection with this website, my private clinical practice and my medico-legal expert witness practice.

Who I am

Miss Alison McCoubrey is a Consultant General and Colorectal Surgeon providing private clinical services and independent medico-legal expert witness services.

For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, I am the data controller for personal information processed directly by me in connection with this website and my professional practice.

ICO registration reference: ZB521069
Email:enquiries@alisonmccoubrey.co.uk

Information I may collect

Depending on the nature of your enquiry or my professional involvement, I may process information including:

  • names and contact details;

  • correspondence and enquiry information;

  • details of solicitors, organisations and other professionals involved;

  • case names, references, parties and relevant deadlines;

  • medical and health information;

  • medical records, reports, imaging and investigation results;

  • information relating to legal claims or proceedings; and

  • other information necessary for the provision of my professional services.

I aim to collect and process only information that is relevant and necessary for the purpose for which it is required.

Private clinical care

Private appointments are arranged through Kingsbridge Private Hospital. Clinical records generated and held within Kingsbridge Private Hospital are subject to the hospital's own data protection and privacy arrangements.

Where I process personal information independently in connection with my private clinical practice, I will do so in accordance with applicable data protection legislation and my professional obligations.

Medico-legal enquiries and expert witness work

If you make a medico-legal enquiry, I may use the information provided to:

  • consider whether the proposed instruction falls within my expertise;

  • undertake conflict checks;

  • assess my availability;

  • communicate with the instructing solicitor or organisation; and

  • administer a potential or accepted instruction.

Submission of an enquiry does not constitute acceptance of an instruction.

Please do not send medical records or other confidential case documentation with an initial email enquiry. Appropriate arrangements for the secure transfer of documentation will be agreed where an instruction is accepted or further information is required.

Where I accept an expert witness instruction, I may receive personal information from sources including instructing solicitors, healthcare providers, medical records, court or tribunal documents, other experts and other material supplied for the purposes of the case.

Lawful basis for processing

I process personal information only where there is an appropriate lawful basis under data protection legislation. Depending on the circumstances, this may include processing necessary for the performance for steps taken before entering into a contract, compliance with legal obligations, or legitimate interests associated with the provision and administration of professional services.

Where special category information, including information about health, is processed in connection with actual or prospective legal claims or proceedings, processing may be necessary for the establishment, exercise or defence of legal claims.

Sharing information

Personal information will only be shared where necessary and appropriate. Depending on the circumstances, recipients may include:

  • instructing solicitors and their authorised representatives;

  • courts or tribunals;

  • healthcare organisations and professionals;

  • other experts or professional advisers where appropriately authorised;

  • providers supplying necessary administrative, IT, email, communications or secure document services; and

  • regulatory, professional or legal authorities where disclosure is required or appropriate.

I do not sell personal information.

Storage and security

I take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, disclosure or misuse.

I use Google Workspace to provide my professional email service. Personal information contained in email correspondence may therefore be processed by Google in providing that service. Where confidential or sensitive information is involved, I will take appropriate steps to use secure methods of transfer and storage.

How long information is retained

Personal information will be retained only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable professional, legal, regulatory, insurance and record-keeping requirements.

Retention periods may therefore vary according to the nature of the information and the professional service concerned.

Your data protection rights

Depending on the circumstances, data protection law may give you rights in relation to your personal information, including the right to:

  • request access to your personal information;

  • request correction of inaccurate or incomplete information;

  • request erasure of your information in certain circumstances;

  • request restriction of processing;

  • object to certain processing; and

  • request transfer of your information in certain circumstances.

These rights are not absolute and may be restricted in some circumstances, including where information is processed in connection with legal proceedings or where retention is required to meet legal, regulatory or professional obligations.

Requests relating to personal information processed by me can be made using the contact details above.

Concerns and complaints

If you have concerns about how I have handled your personal information, please contact me in the first instance.

You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Information Commissioner's Office

Changes to this Privacy Notice

I may update this Privacy Notice from time to time to reflect changes in my professional practice, legal requirements or the services and systems I use.

The date at the top of this page indicates when the notice was last updated.