top of page

Privacy Policy

Privacy Policy v1 May 2018

Who are we:

In this policy whenever you see the words “We”, “Us’” or “Our” it refers to Vale Hand Surgery Ltd. Vale Hand Surgery is the trading entity of Mr Ryan Trickett, Consultant hand and wrist surgeon. It offers specialist medical care.

Our full legal entity is:
Vale Hand Surgery Ltd. c/o Nuffield Hensol Hospital, Hensol Castle Park, Hensol Road, Pontyclun, CF72 8JX.

Mr Ryan Trickett is registered with the Information Comissioner’s Office (ICO) as a data controller.

Your Acceptance of this policy and our right to change it:

By using our website, social media pages, or by placing an enquiry online, or by phone or email, you consent to our collection and use of information you provide in the way(s) set out in our policy. If you do not agree to this policy please do not use our sites, social media pages or seek advice.

If you engage Mr Ryan Trickett for specialist medical care (including but not limited to medical appointments, opinions by telephone/email/videoconference, medicolegal opinion, treatment), your contact details will be stored along with relevant health care information as part of the service to provide medical and health services. This is a contractual agreement in line with the provision of specialist medical care and thus does not require explicit consent. These data are considered separately under the section titled “Sensitive Data”.

We may make changes to this policy from time to time, if we do so we will post the changes on this page and they will apply from the time we post them. The policy was last amended on 25th May 2018.

What is personal data?

Information that can be used to identify an individual, such as name, address, phone number or e-mail address.

What is sensitive data?

Information concerning health status, diagnoses, treatments or anything related to the healthcare provision of a patient.

The Policy:

It is important that you read and understand what information we hold, how we may use it and what your rights are. This policy applies to our websites ( and, our use of e-mails and postal communication and any other methods we use for collecting or communicating information. It covers what we collect and why, what we do with the information and what rights you have.

Personal data collected will be managed differently to sensitive data collected during the provision of healthcare.

What information we collect and why:

We will only ever collect the information we need including data we require to respond to online queries or if we need to contact you in the future.

Personal information such as name, postal address, phone number and e-mail address may be collected for online queries and when a healthcare opinion is sought. We may also need to contact you with queries and questions directly relating to the provision of healthcare.

You do not have to part with any of this information to browse our sites or facilities. However if you seek healthcare advice or undergo treatment these data will be collected as a requirement.

What do we do with the information:

We will use your information:
- To fulfil your requests such as appointment booking or healthcare advice.
- Communicate with you about appointments or services provided.
- Keep a copy/record of any contact we have with you.

Sensitive Data:

As a healthcare professional Mr Ryan Trickett has a legal obligation to maintain medical records securely and for a minimum period of time. All data is stored in line with the guidance issued by the General Medical Council (GMC).

Sharing your information:

We will never use or share your personal information for any purposes without your explicit consent to do so. This does not include sharing as part of your medical care, for example seeking another medical opinion, requesting investigations, notifiying your general practitioner of clinical course or requesting copies of medical records.

Excepting these and similar situations, your medical records will only otherwise be disclosed in the following circumstances:
- With your implicit or explicit consent
- For your overall benefit should you lack capacity to consent
- Is required by law
- Justified in the public interest

These circumstances are in line with the guidance issued by the GMC.

Storage, communication and deletion/destruction of data:

All data is stored on encrypted digital media. This media is dual password protected and encrypted with the highest level of publicly available encryption.

Electronically transmitted data is via email. Where a recipient is unknown email communication will be encrypted.

Paper records are minimised as a standard with the majority of records transformed to electronic versions as soon as possible. Where this is not possible, all paper records are stored in a double locked filing system. If paper records are destroyed subsequent to transformation, this is performed to ensure complete confidentiality without the use of external contractors/services.

Where electronic data is destroyed this is performed using secure deletion software.

What we do with your information:

Your information will be solely used for purposes that enable us to fulfil our contracted healthcare obligations with you.

We will never sell or share your information to other organisations to use for their own purposes.

Your rights:

The GDPR gives you certain rights over your data and how we use it.

These include:
- The right to have inaccurate personal data rectified, blocked, erased or destroyed
- The right to prevent your data being used for direct marketing
- The right of access to a copy of the information we hold about you (subject to an access request)
- If you wish to exercise any of your rights please contact us in writing at: Mr Ryan Trickett, Vale Hand Surgery Ltd. c/o Nuffield Hensol Hospital, Hensol Castle Park, Hensol Road, Pontyclun, CF72 8JX.

Externally linked websites:

Our website may contain links to other relevant websites. These websites are not controlled by Us and thus we have no control over the data protection policy of any externally linked websites. Any information which you provide to an externally linked website is not governed by this policy. You should exercise caution and review the data protection policy of any websites visited.


By using this website you consent to the collection of user data and cookies for analysing website usage.

Further details:

For further information about your rights under the data protection act please visit

bottom of page