Privacy Policy

Last updated: 22 October 2026

1. Who operates this website

This website (drpapachristos.co.uk) is operated by Dr Stavros Papachristos, Consultant Transplant and General Surgeon. It presents his private consulting practice and is aimed primarily at visitors in the United Kingdom (and may be accessed from elsewhere).

For privacy questions about this website, contact: drstpapachristos@gmail.com.

Please do not send urgent medical information or detailed clinical records by ordinary email. If you need urgent medical help, contact NHS 111, or call 999 in an emergency.

Dr Papachristos is registered with the UK General Medical Council (GMC). Further professional information appears on the About page.

2. Website development and content

The website was designed and built by Innovations and More Ltd. OnlinePortfolios.net is the website-building branch and brand of Innovations and More Ltd.

The professional, clinical and other information published on this website was supplied by Dr Stavros Papachristos, who is responsible for the accuracy and completeness of that supplied content.

Building a website, or supplying content for it, does not by itself remove every legal responsibility of either party. Who is a “controller” or “processor” for particular personal data depends on who decides the purposes and means of processing and on what personal data is actually accessed or processed in practice.

3. How you can contact Dr Papachristos

This website does not operate a server-side contact form and does not send emails on your behalf. The “Contact Dr Papachristos” control uses a standard mailto: link. When you use it, your own email application or webmail opens with a suggested subject and short template. You review and send the message yourself.

Any personal data in that email is handled between you and Dr Papachristos (and your email providers). This website’s servers do not receive the contents of that email through a form submission.

4. Personal data processed when you visit

Hosting

The website is hosted by Hostinger. As with most websites, the hosting servers receive technical information sent by your browser so that pages can be delivered and the service protected. This typically includes your IP address, the date and time of the request, the address of the page requested, and standard browser or device information. Hostinger may keep server or security logs under its own practices. See Hostinger’s privacy policy.

Fonts and scripts

Website fonts are hosted on this website’s own servers. Pages do not load fonts from Google Fonts or other third-party font services. First-party scripts are limited to navigation behaviour and a short legacy cleanup script that removes any old cookie-preference value left from an earlier version of the site (see the Cookie Policy).

Cookies and similar technologies

This website’s own code does not currently set first-party cookies or use local storage for tracking or preferences. See the Cookie Policy.

5. Purposes and lawful bases

Technical information associated with visiting the website is processed in order to:

• deliver website pages and assets to your device; and
• operate, secure and maintain the website.

Where UK data protection law requires a lawful basis for this technical processing by or for the website operator, the basis typically relied on is legitimate interests (Article 6(1)(f) UK GDPR) in providing a working, secure information website about the practice. Exact controller and processor roles for Hostinger logs and any developer access remain to be confirmed between the parties (see section 6).

Emails you choose to send via mailto: are processed by Dr Papachristos to respond to your enquiry. The lawful basis for that correspondence is typically legitimate interests in responding to enquiries, or another basis that applies to the particular message (for example where you ask to enter into a contract for private care). Special category health data should not be sent by ordinary email.

6. Recipients and roles (unresolved as between the parties)

Technical visit data may be processed by Hostinger as the hosting provider.

Innovations and More Ltd (through OnlinePortfolios.net) developed this website. It does not receive contact enquiries through a website form or SMTP mailbox on this site, because this site does not send such enquiries.

As website developer or maintainer, Innovations and More Ltd may have technical or administrative access to the hosting environment (for example the Hostinger account), website files, backups and server or security logs. Whether Innovations and More Ltd is a processor, a joint controller, or has no ongoing processing role depends on the parties’ decisions, contracts and actual access. Those roles are not finally determined in this notice. This policy does not designate either party as the sole controller for every category of processing, and it does not state that a data-processing agreement is in place.

7. International transfers

Whether Hostinger processes technical information outside the United Kingdom — and, if so, in which countries and under which safeguards — depends on the hosting plan, data-centre location and Hostinger’s contractual terms for this account. Those facts are not confirmed in the website project files. Until they are confirmed with Hostinger and recorded for this site, this notice cannot state specific transfer locations or safeguards. See also Hostinger’s privacy policy.

8. Retention

• Hosting and security logs: retention periods for this account are set by Hostinger’s product configuration and policies. Specific periods for this website are not confirmed in the project files and should be obtained from Hostinger before this notice is treated as final on retention.
• Emails you send via mailto: retained in the recipient’s mailbox according to how Dr Papachristos manages his email, not by this website’s servers. His retention period for enquiry emails is for him to confirm.

9. Security

Reasonable measures are used to protect the website (including HTTPS where configured on the hosting account). No method of transmission over the internet is completely secure. Ordinary email is not a secure channel for sensitive medical information.

10. Your rights

Under UK data protection law you may have the right to request access to your personal data, correction, deletion, restriction of processing, and to object to certain processing (including where processing is based on legitimate interests). You may also have rights in relation to data portability in some cases.

This website does not use automated decision-making or profiling that produces legal or similarly significant effects about you.

To exercise these rights in relation to this website, email drstpapachristos@gmail.com.

If you are unhappy with how your information has been handled, you can complain to the UK Information Commissioner’s Office (ICO). See how to complain to the ICO.

Visitors outside the UK may have rights under local laws. Contact the privacy address above for assistance.

11. Children

This website is not directed at children.

12. Changes

This policy may be updated when practices change. The “Last updated” date at the top of this page will be revised when changes are published.

13. About this notice

This policy describes the website’s known technical arrangements as of the date above. It is information for visitors, not legal advice, and publishing it does not by itself mean the website meets every legal requirement in every respect.