Privacy Policy
Dr Levansri Makalanda and Makalanda Ltd are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your personal and medical information when you use our website, book consultations, or engage with our neurovascular services.
1. Who We Are
Dr Levansri Makalanda is a Consultant Interventional Neuroradiologist practising in London, United Kingdom. This website, www.makalanda.com, is operated by Makalanda Ltd. For the purposes of data protection legislation, Makalanda Ltd is the data controller responsible for your personal information.
2. Information We Collect
We may collect and process the following categories of personal information:
- Contact details — name, email address, telephone number, and postal address provided through our contact or referral forms.
- Medical information — clinical history, imaging reports, referral letters, and consultation notes shared in the course of seeking or receiving neurovascular care.
- Technical data — IP address, browser type, device information, pages visited, and cookies collected automatically when you browse our website.
- Communication records — correspondence via email, telephone, or our online forms.
3. How We Use Your Information
We use your personal information for the following purposes:
- To respond to your enquiries and manage consultation bookings.
- To provide clinical assessment, diagnosis, and treatment recommendations.
- To process referrals from healthcare professionals.
- To comply with medical, legal, and regulatory obligations.
- To improve our website, services, and patient experience.
- To send appointment reminders or follow-up communications when you have consented.
4. Legal Basis for Processing
We process your personal data on the following legal grounds under UK GDPR:
- Consent — where you have given clear consent for us to process your personal data for a specific purpose.
- Contractual necessity — where processing is necessary to fulfil our agreement to provide medical services.
- Legal obligation — where we are required to process data to comply with medical regulation or law.
- Vital interests — where processing is necessary to protect someone's life, particularly in emergency medical contexts.
- Legitimate interests — where processing is necessary for our legitimate interests, such as improving our services, provided these are not overridden by your rights.
5. Sharing Your Information
We may share your personal information with:
- Other healthcare professionals involved in your care, including referring clinicians, GPs, and hospital teams.
- NHS or private hospital administrative systems where consultations or procedures take place.
- Regulatory bodies such as the General Medical Council (GMC) or the Information Commissioner's Office (ICO) where required.
- Third-party service providers who assist with website hosting, IT support, or appointment scheduling, under strict data processing agreements.
We will never sell your personal data to third parties.
6. Data Retention
Medical records are retained in accordance with NHS and Department of Health guidelines — typically for a minimum of eight years after the last consultation, or longer where clinically or legally required. Non-medical enquiry data is retained for up to two years after the last interaction unless you request earlier deletion.
7. Cookies and Tracking
Our website uses cookies to enhance your browsing experience and analyse site usage. You can manage your cookie preferences through your browser settings. Blocking certain cookies may affect the functionality of some areas of our website.
8. Your Rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data where there is no compelling reason for continued processing.
- Object to or restrict processing in certain circumstances.
- Request data portability.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us using the details provided below.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. All medical information is handled in compliance with NHS information governance standards and UK GDPR requirements.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the revised effective date. We encourage you to review this policy periodically.
11. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how your information is handled, please contact us through the contact form on our website or via the details provided on our Contact page.
This Privacy Policy was last updated in July 2026.