The Surgeon

Privacy Policy

Draft. This page is a draft that requires appropriate legal and professional review before the service launches. Items in square brackets are still to be confirmed.

Who we are

TheSurgeon.in ("The Surgeon", "we") is an online general surgical consultation service operated by INNOVATIONS AND MORE LTD, a company registered in England and Wales (company number 11350220), registered office 128 City Road, London, England, EC1V 2NX. Consultations are provided personally by Dr George Alex, a surgeon registered with the Indian Medical Council (Reg. No. 24300). For any privacy question or request, email admin@innovationsandmore.com, use the contact page or, if you have an account, the "Your information" section of your patient portal.

Information we collect

  • Booking request information: your name, WhatsApp number, the consultation option and time you choose, any note and files you send, the UPI transaction reference you enter and your confirmations (age, location in India and agreement to our terms).
  • Account information (if you create an account): name, email address, mobile number, date of birth, preferred language and password (stored only in a scrambled, non-reversible form).
  • Clinical information you provide: symptoms, medical history, previous operations, medicines, allergies, diagnoses, proposed operations, height, weight, your questions and the reports you upload.
  • Location and eligibility information: your country and state of residence and your confirmation that you are physically in India at the time of the consultation.
  • Consultation records: the surgeon's notes, consultation summaries, follow-up advice and confirmation of your identity and location at the start of the consultation.
  • Payment information: the fee, payment status, receipt number and the UPI transaction reference you enter so that your payment can be matched. We never ask for or store UPI PINs, OTPs, card numbers or bank passwords.
  • Technical information: IP address, date and time of requests and security records needed to keep the service safe.

How we use your information

To check whether your case is suitable for online consultation, contact you on WhatsApp about your request and appointment, prepare for and provide your consultation, prepare written summaries, arrange appointments, confirm payments, communicate with you about your case, keep proper clinical records, meet legal and professional obligations, and keep the service secure. We do not use your information for advertising.

Why we are allowed to use it

We use your health information because you give your consent when you submit your case, and because it is needed to provide the consultation you ask for and to keep proper medical records. For patients in India this follows the Digital Personal Data Protection Act, 2023. Because the surgeon works from the United Kingdom, UK data protection law (UK GDPR and the Data Protection Act 2018) also applies; under it we rely on providing the service you request and on the provision of health care. You can withdraw consent at any time (see "Your rights"); this does not affect care already provided or records we must keep.

Where your information is held

The website, its database and your uploaded files are hosted by Hostinger. The surgeon reviews your information and holds consultations from the United Kingdom, so your information is accessed from outside India.

Who we share information with

  • Hostinger — hosts the website and the encrypted data, and delivers our emails. Emails to patients contain no clinical details. The email that tells the surgeon about a new booking request contains your name, WhatsApp number, chosen consultation and time, and payment reference, but not your note or files.
  • Zoom or WhatsApp (Meta) — used for the video consultation itself, and WhatsApp is also used to contact you about your request and appointment. Your use of these services is also covered by their own terms and privacy policies. Consultations are not recorded.
  • Your bank and UPI app — process your UPI payment under their own terms.
  • Others only when you ask us to (for example your own doctor) or when the law requires it.

We do not sell your information, we do not use advertising or analytics trackers, and we do not send identifiable medical records to artificial-intelligence services.

How long we keep information

Clinical records, consultation summaries and payment records are kept for as long as the legal and professional rules on medical and financial records require, and are then securely deleted. Booking requests that do not go ahead, general enquiries and unfinished drafts are kept only for as long as they are needed for the purpose you gave them, and are then deleted.

Security

All connections use HTTPS encryption. Uploaded files and clinical notes are encrypted when stored, files are never available at public web addresses, and access is limited to you and the surgeon. The surgeon's account is protected by two-factor authentication. Access to records is logged.

Your rights

You can ask for a copy of your information, ask for it to be corrected or completed, ask for it to be deleted, and withdraw your consent. You can also nominate another person to exercise your rights if you are unable to. Use the "Your information" section of your patient portal or the contact page. Some records may have to be kept to meet legal or professional obligations; if so, we will explain why.

If you are not satisfied with our response, you can complain to the Data Protection Board of India or to the UK Information Commissioner's Office (ico.org.uk).

Changes

We will update this policy if our practices change, and show the date of the latest update below.

Last updated: 2026-10-25