Privacy Policy.

This Privacy Policy explains how Allura Medical (“we”, “us” or “our”) collects, uses, shares and protects your personal information when you visit our website (alluramedical.co.uk), contact us, or receive care from our consultants. We are committed to protecting your privacy and handling your information in line with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Who we are.

Allura Medical is a private surgical practice providing facial, oral and maxillofacial surgery and breast oncoplastic surgery across Yorkshire and the North-West. For the purposes of data protection law, Allura Medical is the data controller for the information described in this policy.

How to contact us

Email: info@alluramedical.uk
Phone: +44 737 8528194

The information we collect.

Depending on how you interact with us, we may collect:

• Identity and contact details, such as your name, date of birth, postal address, email address and phone number.
• Health information, such as your medical history, symptoms, diagnoses, treatment records, images and clinical correspondence. This is “special category” data and is protected under the law.
• Appointment and enquiry information, including the details you provide in our contact or booking forms and your preferred location.
• Payment and insurance information, such as your insurer, policy or membership details, and billing information.
• Technical and usage data, such as your IP address, browser type, device information and how you use our website, collected through cookies and similar technologies.

How we collect it.

We collect information directly from you when you complete a form, call or email us, or attend a consultation. We may also receive information from your GP or another healthcare professional who refers you, from hospitals and clinics where your care takes place, and from your insurer. Some technical data is collected automatically when you use our website.

How we use your information.

We use your information to:

• provide, plan and manage your consultation, treatment and aftercare;
• respond to your enquiries and arrange appointments;
• process payments and liaise with your insurer where relevant;
• keep accurate medical records and meet our clinical, professional and legal obligations;
• communicate with you about your care, and with your consent, about services that may be relevant to you;
• maintain the security of, and improve, our website.

Our lawful bases.

Under UK GDPR, we rely on the following lawful bases for processing your personal information:

• Contract, to provide the services you have requested.
• Legal obligation, to comply with our regulatory and record-keeping duties.
• Legitimate interests, to run and improve our practice in a way that does not override your rights.
• Consent, for optional communications and non-essential cookies.

For health and other special category data, we additionally rely on the provision of health or social care (Article 9(2)(h) UK GDPR) and, where relevant, your explicit consent. This information is handled under a duty of confidentiality by qualified professionals.

Who we share it with.

We only share your information where necessary and lawful. This may include:

• the consultant treating you, and the hospitals and clinics where your care takes place;
• other healthcare professionals involved in your care, such as your GP, radiologists or oncology teams;
• your insurer, where you are using medical insurance and have authorised this;
• trusted service providers who process data on our behalf, such as IT, hosting and communication providers, under written agreements;
• regulators, professional bodies or authorities where we are required to do so by law.

We do not sell your personal information, and we do not use it for advertising by third parties.

Cookies.

Our website uses cookies and similar technologies. For full details, please see our Cookie Policy.

Other websites.

Our website may contain links to other websites, such as insurers or hospitals. We are not responsible for the privacy practices of those sites, and we encourage you to read their own policies.

How to complain.

If you have a concern about how we handle your information, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.