Who we are
This website is operated by Dr P N Wright Ltd (company number 16888331), trading as Dr Pandora Wright. Dr Pandora Wright is a Consultant Geriatrician registered with the General Medical Council (GMC number 4094403).
For the purposes of data protection law, Dr P N Wright Ltd is the data controller for personal information collected through this website and the enquiry service.
Contact: office@drpnwright.co.uk
What information we collect
When you submit an enquiry through the website form, we collect:
- Your name, email address, and phone number
- Who is making the enquiry (patient, family member or carer, or referring clinician)
- How you were referred (GP, consultant, self, or insurer)
- Your insurer name and claim reference, if applicable
- Your preferred hospital location, if stated
- Your preferred contact method
We do not collect clinical information, medical history, symptoms, diagnoses, or medications through the website form.
How we use your information
We use the information you provide to:
- Respond to your enquiry using your preferred contact method
- Assess whether an outpatient appointment is suitable
- Coordinate with your GP, referrer, or insurer where relevant
- Arrange an outpatient appointment through the hospital booking team, if appropriate
- Administer the enquiry and maintain a record of the contact
Your contact details will not be used for marketing, shared with third parties for their own purposes, or sold.
Lawful basis for processing
We process your personal information on the following legal bases under UK GDPR:
- Legitimate interests (Article 6(1)(f)) — to respond to your enquiry and assess whether the service is suitable. Our legitimate interest is in providing a responsive and efficient enquiry service for prospective patients and referrers.
- Consent (Article 6(1)(a)) — you give consent when you submit the enquiry form, having acknowledged that your contact details will be used to respond to your request.
If your enquiry leads to a clinical appointment, the hospital where the appointment takes place will become a separate data controller for your clinical records. Their privacy notice will apply to the clinical relationship.
Special category data
The enquiry form does not collect health data or other special category personal data. If you volunteer health information in correspondence, we will handle it with appropriate care and in accordance with UK GDPR Article 9(2)(h) (provision of health care).
Who we share your information with
We may share your information with:
- The hospital outpatient booking team, if an appointment is suitable
- Your GP or referring clinician, where relevant to arranging or coordinating care
- Your insurer, if your enquiry involves an insured referral
We do not share your information with any other third parties unless required by law.
How long we keep your information
Enquiry records are retained for a reasonable period to allow follow-up and for administrative and legal purposes. If an enquiry does not lead to a clinical appointment, the record will normally be retained for up to 12 months and then deleted.
If an enquiry leads to a clinical appointment, the hospital will maintain clinical records in accordance with NHS records management policies.
Your rights
Under UK data protection law, you have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (subject to any legal retention obligations)
- Object to processing based on legitimate interests
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, please contact office@drpnwright.co.uk.
Cookies and tracking
This website is designed not to set non-essential cookies. It does not use analytics tools, advertising trackers, or social media plugins.
If hosting or security services introduce essential technical cookies or server logs, those may still be processed for basic website operation and protection.
Email enquiries
If you email the practice office directly, your message and contact details will be used to respond to your enquiry and, where relevant, to help arrange or administer care. Please do not send urgent or emergency medical information by email.
Changes to this notice
This notice may be updated from time to time. The current version is always available at this page.
Last updated: May 2026