Privacy policy
In short
- This website is run by Atanu Bhattacharjee, Consultant Orthopaedic Surgeon. It is not run by Swansea Bay University Health Board.
- We only collect what you choose to send us, plus basic technical data needed to run the website.
- The calorie planner keeps your height, weight and meal log on your own phone. They are not sent to us.
- Meal photos and descriptions go to an AI service to work out an estimate. This website does not store them.
- We never sell your information or use it for marketing.
- You can ask to see, correct or delete your information at any time.
Contents
- Who we are
- This website and your NHS care
- Information we collect
- The calorie planner and meal checker
- Health information
- Why we use it and our legal basis
- Who we share it with
- Transfers outside the UK
- How long we keep it
- Cookies and storage on your device
- Keeping it secure
- Your rights
- Children
- Other websites
- Changes to this policy
- Contact and complaints
1. Who we are
This website is owned and run by Atanu Bhattacharjee, Consultant Orthopaedic Surgeon. In this policy, "we", "us" and "our" mean Atanu Bhattacharjee.
We are the data controller for personal information collected through this website. This means we decide how it is used and we are responsible for protecting it under UK data protection law. That law is the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
You can contact us through the contact page.
2. This website and your NHS care
This website gives general information. It is separate from your NHS care.
- Your NHS medical records are held by Swansea Bay University Health Board, not by this website. The health board's own privacy notice explains how it uses them.
- Nothing you send through this website is added to your medical records, unless you ask us to pass it on and we agree it is appropriate.
- Do not use this website to ask for urgent help. For urgent medical advice, call NHS 111 Wales on 111. In an emergency, call 999.
3. Information we collect
When you visit the website
Like all websites, our web server records basic technical information when a page is loaded. This includes your internet (IP) address, the date and time, the page requested, your browser type and the website that sent you to us. Our hosting provider keeps these logs for security and to fix faults.
Website statistics
We use Google Analytics, through Google Site Kit, to count visits and see which pages are useful. It tells us things like the number of visitors, the pages viewed, the type of device and the town or region a visit came from. It does not tell us who you are. Google Analytics uses cookies, which are explained in section 10.
When you use the contact form
We collect your name, email address, phone number, subject and message. If you attach an image, we receive that too. We use this only to reply to you.
When you leave feedback
We collect your name, email address, phone number if you give it, your star rating and your comments. We use this to understand and improve the care and information we provide. We will not publish your feedback with your full name. If we would like to quote it on this website, we will ask your permission first.
4. The calorie planner and meal checker
Calorie planner
Your sex, age, height, weight, activity level and goals are worked out on your own phone or computer. They are saved in your browser's storage so you do not have to enter them again. They are never sent to this website or to anyone else.
Meal checker
Before you first use the meal checker, we ask you to tick a box agreeing to how it works. When you send a meal:
- Your photo, or what you typed, and any note you add are sent securely to our website.
- Our website passes them straight to Anthropic, the AI provider, to work out the estimate. Your name, email address and internet address are not sent to Anthropic.
- The estimate comes back to your phone. This website does not store your photo, your description or the result.
- Your meal log, saved regular meals and daily totals are kept in your browser's storage on your own device.
Please do not include your face, your name or other personal details in a photo or note.
Fair-use limits
To keep the service free and stop misuse, the website counts how many meals are checked each day. When no access code is needed, the count is linked to a scrambled version of your internet address. This cannot be turned back into your address. The count is deleted at the end of the day. If someone enters wrong access codes many times, a similar scrambled record blocks further tries for one hour.
Access codes
Patients may be given an access code in clinic. Codes are not linked to your name in this website. When you first use a code, your phone creates a random identifier. The website stores a scrambled form of it with the code, so the code works on one phone only. For each code, the website records when it was first used, how many meals were checked each day and when it expires.
5. Health information
Some information can reveal something about your health. Examples are a message about your joint, an image you attach, or a meal note mentioning a medical condition. The law calls this special category data and gives it extra protection.
- We only use it for the purpose you sent it for, such as replying to your message or giving a meal estimate.
- Our legal basis is your explicit consent, which you give by choosing to send it to us (UK GDPR Article 9(2)(a)). For the meal checker, you also give consent by ticking the box before first use.
- You can withdraw your consent at any time. This does not affect anything we did before you withdrew it.
Please do not send X-rays, scans, letters or medical records through the contact form. If you are a patient, your clinical team can be reached through the hospital or your GP.
6. Why we use it and our legal basis
| What we do | Information | Legal basis |
|---|---|---|
| Run the website and keep it secure | Server logs, internet address | Legitimate interests: running a safe, working website |
| Measure how the website is used | Google Analytics data | Consent, where cookies are used (PECR); legitimate interests in improving the website |
| Reply to your enquiry | Contact form details, any image | Legitimate interests: answering your enquiry. Explicit consent for any health information |
| Learn from your feedback | Feedback form details | Legitimate interests: improving care and information. Explicit consent for any health information |
| Give a meal estimate | Meal photo, description, note | Consent, given by ticking the box before first use. Explicit consent for any health information |
| Apply fair-use limits and stop misuse | Scrambled internet address, scrambled phone identifier, daily counts | Legitimate interests: keeping a free service available and affordable |
| Meet legal duties | Any of the above, if required | Legal obligation |
Where we rely on legitimate interests, we have checked that our interests do not override your rights. You can object at any time (see section 12).
7. Who we share it with
We do not sell your information. We do not use it for advertising or marketing. We only share it with:
- Our website hosting provider, which stores the website and its server logs.
- Our email provider, which delivers contact and feedback form messages to us.
- Anthropic (Anthropic PBC), which analyses meal photos and descriptions for the meal checker. It acts on our instructions under a data processing agreement. Under its commercial terms, it does not use this data to train its AI.
- Google, which provides Google Analytics. Google may also supply some of the fonts used on the website, which means your browser contacts Google's servers.
- Others when the law requires it, for example a court order, or to protect someone from serious harm.
Each provider may only use your information to provide its service to us.
8. Transfers outside the UK
Anthropic and Google are based in the United States and may process information there. Transfers are protected by safeguards approved under UK law. These include the UK–US data bridge, where the company is certified, and the UK International Data Transfer Addendum to standard contractual clauses.
9. How long we keep it
| Information | How long |
|---|---|
| Contact form messages and images | Up to 12 months after our last contact with you, then deleted |
| Feedback | Up to 3 years, then deleted. Comments kept longer for learning have names removed |
| Meal photos and descriptions on this website | Not stored. They are deleted as soon as the estimate is returned |
| Meal photos and descriptions held by Anthropic | Deleted by Anthropic within 30 days. Anthropic may keep content flagged for breaking its usage policy for up to 2 years |
| Daily fair-use counts | Deleted at the end of the day |
| Wrong-code blocks | One hour |
| Access code records | Up to 12 months after the code expires, then deleted |
| Server logs | For the limited period set by our hosting provider, usually no more than 90 days |
| Google Analytics data | Up to 14 months, then deleted by Google |
| Planner details and meal log on your device | Until you clear them. You control these (see section 10) |
10. Cookies and storage on your device
Cookies are small files a website saves in your browser. Browser storage works in a similar way. We use them as follows.
| Name | Type | Purpose | How long |
|---|---|---|---|
adofs_profile | Browser storage, essential | Remembers your calorie planner details | Until you clear it |
adofs_log_… | Browser storage, essential | Your meal log for each day | Until you clear it |
adofs_regulars | Browser storage, essential | Meals you have saved to log again | Until you clear it |
adofs_consent | Browser storage, essential | Remembers that you agreed to how the meal checker works | Until you clear it |
adofs_access | Browser storage, essential | Remembers your access code on this phone | Until you clear it |
adofs_tab | Browser storage, essential | Remembers the meal checker tab you used last | Until you clear it |
_ga, _ga_* | Cookie, analytics | Google Analytics: counts visits and tells apart different visitors | Up to 2 years |
wordpress_*, wp-settings-* | Cookie, essential | Only for website administrators who log in | Session to 1 year |
Essential storage is needed for the tools to work as you asked, so it does not need consent. You can still remove it.
How to remove or block them
- iPhone (Safari): Settings › Apps › Safari › Advanced › Website Data. Find this website and delete it.
- Android (Chrome): open Chrome, tap ⋮ › Settings › Site settings › All sites. Find this website and tap Delete data.
- Computer: in your browser settings, find Privacy, then Cookies and site data.
Clearing this data removes your planner details and meal log for good. To stop Google Analytics on any website, you can install Google's opt-out browser add-on.
11. Keeping it secure
- The website uses an encrypted connection (HTTPS). Everything you send is encrypted on its way to us and to Anthropic.
- The key used to reach the AI service is kept on the server and is never sent to your browser.
- Access to the website's administration is limited and password-protected.
- Form messages are only read by Atanu Bhattacharjee and anyone helping him run the website, who must keep them confidential.
No website can be completely secure. If there is a data breach that puts you at risk, we will tell you and the Information Commissioner's Office as the law requires.
12. Your rights
Under UK data protection law, you have the right to:
- see the information we hold about you (a subject access request);
- correct information that is wrong or incomplete;
- delete your information;
- restrict how we use it;
- object to us using it where we rely on legitimate interests;
- move information you gave us to another organisation (data portability);
- withdraw consent at any time, where we rely on it.
To use any of these rights, contact us through the contact page. There is no charge. We will reply within one month. We may ask you to confirm who you are first.
We cannot find information we never receive or keep. This includes your planner details and meal log, which stay on your device, and meal photos, which this website does not store. You can delete your device data yourself (see section 10).
We do not make decisions about you based only on automated processing. The meal checker's estimates are a guide for you to use. They are not decisions about your care.
13. Children
This website is for adults. The calorie planner and meal checker are for people aged 18 or over. We do not knowingly collect information from children. If you think a child has sent us information, please contact us and we will delete it.
14. Other websites
This website links to other websites, such as the NHS, NICE and social media. We are not responsible for how they handle your information. Please read their privacy policies.
15. Changes to this policy
We will update this policy when how we use information changes. The date at the top shows when it last changed. Important changes will also be shown on the pages they affect.
16. Contact and complaints
For any question about this policy or your information, contact us through the contact page.
If you are unhappy with how we have used your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
