Last updated: [01/06/2026]
Privacy Policy
This Privacy Policy explains how Mr Ali Juma, Consultant Plastic, Reconstructive & Aesthetic Surgeon, collects, uses, stores and protects your personal information when you use this website, contact us, make an enquiry, request a consultation, or receive care from us. We are committed to protecting your privacy and handling your personal information in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable UK data protection laws.
1. Who we are
This website is operated by Mr Ali Juma, Consultant Plastic, Reconstructive & Aesthetic Surgeon.
Website: https://www.alijuma.co.uk/
Consulting rooms: The Clinic @51, First Floor, 51 Rodney Street, Liverpool, L1 9AT
Email: enquiries@alijuma.co.uk
Telephone: 0151 230 1648
PA/Mobile: 07855 466 345
For the purposes of UK data protection law, we are the “data controller” of the personal information we collect and process about you through this website, our enquiry forms, consultation requests and patient communications.
2. What personal information we collect
We may collect and process different types of personal information depending on how you interact with us.
This may include:
- Your name
- Email address
- Telephone number
- Address or general location
- Date of birth or age, where relevant
- Details submitted through enquiry forms or consultation request forms
- Information about the procedure, treatment or service you are interested in
- Medical history or health-related information you choose to share with us
- Information about previous treatments, surgery, medication, allergies or existing medical conditions
- Photographs or images you provide for consultation, assessment or treatment planning purposes
- Appointment and consultation details
- Payment or billing information, where applicable
- Communication history, including emails, calls, messages and form submissions
- Reviews, testimonials or feedback you choose to provide
We may also collect limited technical information when you use our website, including:
- IP address
- Browser type and version
- Device type
- Pages visited
- Time spent on the website
- Referring website or search engine
- General location data
- Cookie and analytics information
3. Health and medical information
If you contact us about a treatment, consultation or surgical procedure, you may choose to provide health or medical information. This may include information about your health, medical history, symptoms, medication, allergies, previous surgery, photographs, treatment goals or concerns.
Health information is classed as special category data under UK data protection law. This means it is more sensitive and requires additional protection.
We only collect health-related information where it is relevant and necessary for your enquiry, consultation, treatment planning, care, aftercare, legal obligations or professional responsibilities.
4. How we collect your information
We may collect your personal information when you:
- Fill in a contact form on our website
- Submit an enquiry or consultation request
- Contact us by phone, email, WhatsApp, text message or another communication channel
- Attend a consultation or appointment
- Send photographs, documents or medical information
- Make a payment or request pricing information
- Leave a review, testimonial or feedback
- Use or browse our website
- Interact with our social media profiles or online listings
5. How we use your personal information
We use your personal information for the following purposes:
- To respond to your enquiry
- To provide information about treatments, consultations and services
- To arrange, manage and follow up on consultations or appointments
- To assess whether a procedure or treatment may be suitable for you
- To support treatment planning, clinical care and aftercare
- To maintain accurate patient and consultation records
- To communicate with you before and after your consultation or treatment
- To provide pricing, payment or administrative information
- To manage reviews, testimonials or feedback, where appropriate
- To improve our website, services and patient experience
- To monitor website performance and understand how users interact with the site
- To maintain the security of our website and systems
- To comply with legal, regulatory, clinical, professional, tax, insurance and record-keeping obligations
- To establish, exercise or defend legal claims, where necessary
6. Our lawful basis for using your information
Under UK data protection law, we must have a lawful basis for using your personal information. Depending on the situation, we may rely on one or more of the following lawful bases:
Consent
We may rely on your consent where you choose to submit certain information, agree to receive marketing communications, provide photographs for a specific purpose, or agree to the use of a testimonial or image.
You can withdraw your consent at any time by contacting us.
Contract
We may use your information where it is necessary to provide services you have requested, or to take steps before providing those services, such as arranging a consultation or responding to a treatment enquiry.
Legal obligation
We may use your information where we are required to do so by law, regulation, professional standards, tax requirements, safeguarding duties, insurance requirements or court orders.
Legitimate interests
We may use your information where it is necessary for our legitimate business interests and your rights do not override those interests. This may include responding to enquiries, managing appointments, improving our website, keeping business records, preventing fraud, protecting our website and communicating with patients.
Vital interests
In rare circumstances, we may use your information where it is necessary to protect your life or the life of another person, such as in a medical emergency.
7. Special category data lawful basis
Where we process health or medical information, we will also identify an additional condition under Article 9 of the UK GDPR.
This may include processing that is necessary for:
- Medical assessment, diagnosis, treatment or care
- The management of healthcare services
- Compliance with professional, legal or regulatory obligations
- Establishing, exercising or defending legal claims
- Protecting vital interests in an emergency
- Explicit consent, where required
We will only use special category data where it is necessary, relevant and handled with appropriate confidentiality and security.
8. Marketing communications
We may use your contact details to send you relevant information about our services, treatments or updates if you have opted in or where we are otherwise legally permitted to do so.
You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails, where available, or by contacting us directly.
We will not sell your personal information to third parties for marketing purposes.
9. Cookies and analytics
Our website may use cookies and similar technologies to improve functionality, analyse website performance and understand how visitors use the site.
Cookies may help us:
- Make the website work properly
- Understand which pages are visited
- Measure website traffic and performance
- Improve user experience
- Support analytics and marketing activity, where enabled
We may use analytics and tracking tools such as Google Analytics, Google Search Console, Google Ads, Meta Pixel or similar services, depending on the tools active on the website.
Where required, we will ask for your consent before placing non-essential cookies on your device.
For more information, please refer to our Cookie Policy: [Insert Cookie Policy URL if available].
10. Who we share your information with
We may share your personal information with trusted third parties where necessary and appropriate. This may include:
- Clinical, medical, nursing or administrative staff involved in your care
- Appointment booking or patient management systems
- IT, website hosting and technical support providers
- Email, telephone, CRM or communication providers
- Payment processors, where applicable
- Professional advisers, including accountants, insurers and legal advisers
- Regulators, professional bodies, law enforcement agencies or public authorities, where required by law
- Analytics and marketing service providers, where relevant and permitted
We only share personal information where there is a lawful reason to do so and, where required, appropriate safeguards are in place.
11. International data transfers
Some of the systems or service providers we use may process or store personal information outside the United Kingdom.
Where this happens, we will take appropriate steps to ensure your personal information remains protected in line with UK data protection law. This may include using approved contractual safeguards or working with providers based in countries that have appropriate data protection protections in place.
12. How long we keep your information
We only keep your personal information for as long as necessary for the purpose it was collected and to meet legal, clinical, regulatory, professional, insurance, tax or reporting requirements.
Retention periods may vary depending on the type of information and why it is held.
For example:
- General enquiries may be kept for a reasonable period after the enquiry has been handled
- Consultation and patient records may be kept for longer where required for clinical, legal, insurance or regulatory reasons
- Marketing preferences may be kept until you unsubscribe or withdraw consent
- Financial records may be kept in line with accounting and tax requirements
- Website analytics data may be kept in line with the settings of the relevant analytics platform
When personal information is no longer needed, we will securely delete, anonymise or archive it where appropriate.
13. How we protect your information
We take appropriate technical and organisational steps to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.
These steps may include:
- Secure website hosting
- Password-protected systems
- Restricted access to personal and medical information
- Staff confidentiality obligations
- Secure storage and communication processes
- Regular review of security and data protection practices
Although we take reasonable steps to protect your information, no online system or method of transmission is completely secure. Please take care when sharing sensitive information online.
14. Your data protection rights
Under UK data protection law, you have rights in relation to your personal information. These may include:
- The right to be informed about how your information is used
- The right to access a copy of the personal information we hold about you
- The right to correct inaccurate or incomplete information
- The right to request deletion of your information in certain circumstances
- The right to restrict how your information is used
- The right to object to certain types of processing
- The right to data portability in certain circumstances
- The right to withdraw consent where we rely on consent
- Rights relating to automated decision-making, where applicable
To exercise your rights, please contact us using the details in this Privacy Policy.
We may need to verify your identity before responding to your request. We will respond within the timeframe required by law.
15. Children’s privacy
Our website is not intended for children. We do not knowingly collect personal information from children through this website.
If we become aware that we have collected information from a child without an appropriate lawful basis or required consent, we will take appropriate steps to delete it.
16. Reviews, testimonials and images
If you provide a review, testimonial, photograph or before-and-after image, we will only use it where we have an appropriate lawful basis.
Where consent is required, we will ask for your permission before using identifiable images or testimonials for marketing, website or promotional purposes.
You can withdraw consent for the use of identifiable images or testimonials by contacting us. This will not affect any use that took place before consent was withdrawn.
17. Links to other websites
Our website may include links to third-party websites, including social media platforms, review websites, professional profiles or external resources.
We are not responsible for the privacy practices, content or security of third-party websites. We recommend that you read their privacy policies before providing personal information.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, services, legal requirements or data protection practices.
The latest version will be available on this page. Please check this page regularly to stay informed about how we use and protect your information.
19. How to contact us
If you have any questions about this Privacy Policy or how your personal information is handled, please contact us:
Mr Ali Juma, Consultant Plastic, Reconstructive & Aesthetic Surgeon
Consulting rooms: The Clinic @51, First Floor, 51 Rodney Street, Liverpool, L1 9AT
Email: enquiries@alijuma.co.uk
Telephone: 0151 230 1648
PA/Mobile: 07855 466 345
20. How to complain
If you are unhappy with how we have handled your personal information, please contact us first so we can try to resolve your concern.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection matters.
Information Commissioner’s Office
Website: https://ico.org.uk/
Telephone: 0303 123 1113