Legal
Privacy policy
This policy explains how personal data is handled in connection with this website and with medico-legal instructions. It is separate from the data security page, which sets out the technical and organisational detail solicitors’ compliance teams usually ask for.
Who is responsible for your data
This website is operated by Mr Marco Scarci, Consultant Thoracic Surgeon. For the purposes of UK GDPR and the Data Protection Act 2018, Mr Scarci is the data controller for personal data collected through this website and, in most instructions, an independent data controller for the personal data contained in instructions and medical records — not a processor acting on a firm’s behalf.
Contact: info@thoracicsurgeryexpertwitness.co.uk
ICO registration number: Z3419044
What data is collected, and why
Through this website
- Contact form submissions: name, firm, email address, telephone number, and the details you provide about the case. Used to respond to your enquiry and, if instructed, to open a file.
- Basic analytics: Google Analytics.
Through an instruction
- Medical records, court documents and case papers supplied by the instructing party. This routinely includes special category data (health data) about the claimant or defendant.
- Correspondence relating to the instruction.
Lawful basis for processing
- Website contact form: legitimate interests (responding to enquiries about instructing an expert witness).
- Special category data in medical records supplied for an instruction: Article 9(2)(f) UK GDPR — processing necessary for the establishment, exercise or defence of legal claims.
How long data is kept
Records connected with an instruction are retained for 6 months following its conclusion, then securely deleted or confidentially destroyed. Website enquiry data that does not lead to an instruction is deleted after 12 months.
Who data is shared with
Records are not shared with any third party except Dropbox, used as a secure document store that is HIPAA compliant and approved for healthcare use. Records are never used for marketing and are not sold or shared for any purpose unconnected with the instruction.
Your rights
Under UK GDPR you have the right to:
- Access the personal data held about you
- Have inaccurate data corrected
- Have data erased, unless the records are necessary for the establishment, exercise or defence of legal claims
- Restrict or object to certain processing
- Data portability, where applicable
To exercise any of these rights, contact info@thoracicsurgeryexpertwitness.co.uk. If you are not satisfied with the response, you have the right to complain to the Information Commissioner’s Office (ico.org.uk).
Changes to this policy
This policy may be updated from time to time. The date below shows when it was last revised.
Last updated: 5 October 2026