Privacy Policy

This site, https://inayatpanda.com, is operated by Mr Inayat Panda, an orthopaedic surgeon writing in a personal capacity. This policy explains what personal data is collected when you use the site, why, on what lawful basis, how long it is kept, and the rights you have under UK data protection law (UK GDPR and the Data Protection Act 2018). For the purposes of that law, Mr Inayat Panda is the data controller.

What data is collected

The site is a static blog and collects no personal data simply by being browsed. Personal data is collected only when you choose to send it:

• Contact form. When you use the contact form, you submit your name, your email address, and the message you write. The form is processed on our behalf by Formspree (see sub-processors below), which forwards the submission to the site owner by email.
• Server logs. The hosting provider keeps standard web-server logs (such as IP address, browser type and pages requested) for security and to keep the site running. These are handled by the host under its own terms.

No analytics, advertising or tracking tools are used, and no tracking cookies are set. See the Cookie & Storage Policy for the only browser storage the site uses.

How the data is used and the lawful basis

• Replying to you. Contact-form data is used solely to read and reply to your enquiry. The lawful basis is legitimate interests (UK GDPR Art. 6(1)(f)) — responding to people who get in touch — and, where you send a message, your action in submitting it.
• Security and operation. Server logs are processed on the basis of legitimate interests in keeping the site secure and available.

Please do not send sensitive personal information — and, in particular, no patient-identifiable information — through the contact form. It is a general enquiry channel, not a clinical or medical-records channel.

How long it is kept

Contact-form messages are retained only as long as needed to handle your enquiry and any reasonable follow-up, after which they are deleted. Server logs are kept for the period set by the hosting provider. If a definite retention period is required for your records, contact us at the address below.

Who the data is shared with — sub-processors

The site relies on the following providers, which may process limited personal data on the site owner's behalf. Some are based outside the UK; where data is transferred internationally, it is protected by appropriate safeguards (such as the providers' standard contractual clauses and equivalent transfer mechanisms).

Provider	Role
Formspree	Processes and forwards contact-form submissions (name, email, message).
Netlify	Hosting / deployment platform used in the site's publishing workflow.
Hostinger	Web host serving the live site and keeping server logs.
Cloudflare	Content delivery and media/asset serving.

For features that use AI-assisted drafting, text you choose to process may be sent to one of the following AI providers: Anthropic, Google, or OpenAI. These features are used by the site owner to help draft written content and are not applied to your contact-form messages.

Beyond these providers, your data is not sold and is not shared with third parties, except where required by law.

Your rights

Under UK GDPR you have the right to:

• Access the personal data held about you;
• request rectification of inaccurate data;
• request erasure ("the right to be forgotten");
• restrict or object to processing carried out on the basis of legitimate interests;
• request portability of data you provided; and
• withdraw any consent you have given, without affecting earlier processing.

To exercise any of these rights, email inayatpanda@gmail.com. We aim to respond within one month.

Complaints

If you are concerned about how your data is handled, please contact us first so we can try to put it right. You also have the right to complain to the supervisory authority — in the UK, the Information Commissioner's Office (ICO), ico.org.uk.

Changes to this policy

This policy may be updated from time to time. The current version always lives at this address, with the "last updated" date above.

Questions about this policy? Email inayatpanda@gmail.com or use the contact form.