Who we are

Orfaniotis Plastic Surgery is the private practice of Mr Georgios Orfaniotis, consultant plastic surgeon. This notice explains how we collect and use your personal information when you enquire about treatment, including through our online enquiry form, and when you become a patient.

The data controller is Orfaniotis Face Group Ltd registered in England and Wales (company number 17270452), registered office Unit 23 Stockwood Business Park, Stockwood, Redditch, England, B96 6SX. We are registered with the Information Commissioner’s Office (ICO).

Consultations take place at The Montrose London, 19 West Eaton Place, Belgravia, London SW1X 8LT.

Information we collect

When you make an enquiry, we collect:

• Contact details: your name, email address, phone number and how you prefer to be contacted.
• Enquiry details: the procedure you are interested in and any previous facial surgery or treatments you tell us about.
• Photographs: facial photographs you choose to upload so Mr Orfaniotis can review your enquiry.

If you become a patient, we also hold your medical history, consultation notes, clinical photographs, treatment records, appointment history and payment information.

Your photographs and medical information are special category data under UK data protection law. We give this information extra protection.

How we use your information and our legal basis

What we do	Legal basis (UK GDPR)
Respond to your enquiry and arrange a consultation	Steps at your request before entering a contract, Article 6(1)(b)
Review your photographs and enquiry details to assess whether surgery is right for you	Your explicit consent, Article 9(2)(a)
Provide consultations, surgery and aftercare, and keep medical records	Performance of a contract, Article 6(1)(b), and provision of health care, Article 9(2)(h)
Take payments and keep financial records	Contract, Article 6(1)(b), and legal obligation, Article 6(1)(c)
Run and improve the practice, e.g. tracking enquiries	Our legitimate interests, Article 6(1)(f)

You can withdraw your consent to us using your enquiry photographs at any time by emailing us. This will not affect anything we did before you withdrew it.

We do not sell your information or use it for marketing without your separate consent.

Who can see your information

Your enquiry photographs are seen by Mr Orfaniotis and his team. Your contact and enquiry details are also seen by our practice team so they can arrange your consultation.

We use trusted service providers to run the practice. They act only on our instructions, under a written data processing agreement:

• Jotform: our online enquiry form
• Semble: our patient records and booking system
• Microsoft 365: email and secure file storage
• Xero: accounts and payments

If you go ahead with treatment, we may share relevant information with the hospitals where your surgery takes place, your GP (with your agreement), or where the law requires it.

Where your information is stored

We store your information securely, with access limited to those who need it. Where our providers process it outside the UK (for example in the EU), it is protected by UK-approved safeguards.

How long we keep your information

Information	How long we keep it
Enquiries that do not go ahead, including photographs	6 months from your last contact with us, then deleted
Enquiry photographs once you become a patient	Moved into your medical record, then deleted from the enquiry system.
Medical records, including clinical photographs	At least 8 years after your last treatment, in line with NHS records retention guidance.
Financial records	At least 6 years, as required by law.

Your rights

You have the right to:

• ask for a copy of the information we hold about you
• ask us to correct anything that is wrong
• ask us to delete your information, where we are not required to keep it
• ask us to restrict or stop using your information
• withdraw your consent at any time
• receive your information in a portable format

To use any of these rights, email us. We will respond within one month and will not charge a fee in most cases.

If you are unhappy with how we have handled your information, please contact us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Contact us

Email: office@orfaniotis.co.uk Phone: +44 (0)207 177 8118 Post: Montrose London is located at 19 West Eaton Place, Belgravia, London SW1X 8LT.

We may update this notice from time to time. The latest version will always be on our website.

Last updated: 1st October 2026