Privacy Policy

1. Who we are

Dr Levansri Makalanda is a Consultant Interventional Neuroradiologist practising in London, United Kingdom. This website, www.makalanda.com, is operated by Neuroscan Limited. For the purposes of data protection legislation, Neuroscan Limited is the data controller responsible for your personal information.

2. Information we collect

We may collect and process the following categories of personal information:

• Contact details: name, email address, telephone number and postal address provided through our contact or referral forms.
• Medical information: clinical history, imaging reports, referral letters and consultation notes shared in the course of seeking or receiving neurovascular care.
• Technical data: IP address, browser type and device information recorded in short-lived server logs.
• Communication records: correspondence via email, telephone or our online forms.

3. How we use your information

We use your personal information for the following purposes:

• To respond to your enquiries and manage consultation bookings.
• To provide clinical assessment, diagnosis and treatment recommendations.
• To process referrals from healthcare professionals.
• To comply with medical, legal and regulatory obligations.
• To improve our website, services and patient experience.
• To send appointment reminders or follow-up communications when you have consented.

4. Legal basis for processing

We process your personal data on the following legal grounds under UK GDPR:

• Consent: where you have given clear consent for us to process your personal data for a specific purpose.
• Contractual necessity: where processing is necessary to fulfil our agreement to provide medical services.
• Legal obligation: where we are required to process data to comply with medical regulation or law.
• Vital interests: where processing is necessary to protect someone’s life, particularly in emergency medical contexts.
• Legitimate interests: where processing is necessary for our legitimate interests, such as improving our services, provided these are not overridden by your rights.

5. Sharing your information

We may share your personal information with:

• Other healthcare professionals involved in your care, including referring clinicians, GPs and hospital teams.
• NHS or private hospital administrative systems where consultations or procedures take place.
• Regulatory bodies such as the General Medical Council (GMC) or the Information Commissioner’s Office (ICO) where required.
• Our website hosting provider, which operates the server for www.makalanda.com and keeps short-lived technical logs that include IP addresses.
• Our email provider, which transmits and stores enquiries and any files you attach to the contact form so that they reach the practice.
• The provider of the AI assistant on this website. See section 5A.

Our hosting and email providers act as processors under written data processing agreements and only on our instructions. We can name them on request. This website uses no analytics, advertising or social media tracking services.

We will never sell your personal data to third parties.

5A. The AI assistant

Some pages on this website carry an AI assistant that answers general questions about the conditions and treatments described on the site. It is provided by CustomGPT.ai (Poll the People, Inc., United States) and answers only from content we have approved.

It is not medical advice. The assistant gives general information and does not know your medical history. It cannot diagnose, advise on your treatment or replace a consultation. If you have new or worsening symptoms, contact your GP, call NHS 111, or in an emergency call 999.

Please do not enter personal or medical details. Do not type your name, date of birth, contact details, NHS number or anything about your own health into the chat. To ask about your own care, use the contact form or call Dr Makalanda’s secretary on 020 7034 5064.

What is collected. The questions you type, the answers given and basic technical information needed to run the chat, such as your browser type and the time of the conversation. We use the conversation record only to check that answers are accurate and to improve the content on this website.

Where it is processed. CustomGPT.ai stores conversations on servers in the United States and uses other technology providers, including providers of AI language models, to generate answers.

How long it is kept. Conversations are deleted automatically after 12 months.

Legal basis. We rely on our legitimate interest in answering general questions from visitors to this website. Because we ask you not to enter personal or medical information, we do not expect to process health data through the assistant. If you do enter it, we will treat it with the same care as any other health information.

Your choices. Using the assistant is optional, and all the information it draws on is published on this website. If you have used the chat and want your conversation deleted, contact us and we will ask CustomGPT.ai to remove it.

6. Data retention

Medical records are retained in accordance with NHS and Department of Health guidelines: typically for a minimum of eight years after the last consultation, or longer where clinically or legally required. Non-medical enquiry data is retained for up to two years after the last interaction unless you request earlier deletion.

7. Cookies and tracking

This website does not use analytics, advertising or social media tracking, and it does not set cookies to follow your browsing or analyse how the site is used. You can still manage or block cookies through your browser settings.

Embedded videos. Some articles include videos hosted on YouTube or Vimeo. Nothing is loaded from those services until you press play. When you do, the video is streamed by YouTube (in its privacy-enhanced mode) or Vimeo (with its “do not track” setting), which receive your IP address and may set cookies under their own privacy policies.

8. Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data where there is no compelling reason for continued processing.
• Object to or restrict processing in certain circumstances.
• Request data portability.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details provided below.

9. Data security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. All medical information is handled in compliance with NHS information governance standards and UK GDPR requirements.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the revised effective date. We encourage you to review this policy periodically.

11. Contact us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how your information is handled, please contact us through the contact form on our website or via the details provided on our Contact page.

This Privacy Policy was last updated in October 2026.