Privacy Policy

Ms Alice Murray, Consultant Colorectal Surgeon

Last updated: 18 June 2026

This privacy policy explains how we collect, use and protect your personal information when you use our website. We keep what we collect to a minimum, and we handle it lawfully, fairly and with care. Please read this policy alongside our Terms of Use.

1. Who we are

For the purposes of UK data protection law, the data controller is Alice Murray Healthcare Partners Ltd, referred to in this policy as we, us or the practice.

You can reach us about anything in this policy at: Suite 2, 9 West End, Kemsing, Sevenoaks, england TN15 6PX, Alice.murray@gmail.com, +44 7887 667008.

2. The legal framework we follow

We handle your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025. Rules on cookies and electronic messages are set by the Privacy and Electronic Communications Regulations. The Information Commissioner’s Office is the regulator that oversees these laws.

3. The information we collect

We collect personal information in two situations only.

When you contact us through the website

Our contact form asks for your name, telephone number, email address, the subject of your message, and the message itself. We use this only to respond to you.

When you browse the website

We use Google Analytics to understand how the site is used, such as how many people visit and which pages they view. This is collected through cookies and may include information such as your approximate location, device and an online identifier, rather than your name. We set these analytics cookies only if you accept them through our cookie banner.

Please do not include detailed medical information in the message box, as a website form is not a secure place for sensitive detail. You can share that privately in a consultation.

4. We use your information in the following ways:

  • Responding to your enquiry and arranging a first appointment. This uses your contact form details. We rely on taking steps at your request before entering a contract, together with our legitimate interest in responding to enquiries.

  • Understanding how the website is used so we can improve it. This uses Google Analytics information. We rely on your consent, which you give through our cookie banner and can withdraw at any time.

  • Meeting our legal and regulatory duties. This uses whatever information the relevant law requires. We rely on our need to comply with a legal obligation.

 

If you choose to include health information in your message, we treat it as a special category of data, which carries extra protection. In that case we rely on your explicit consent in sending it, or on the basis that it is needed for your medical care.

5. If you become a patient

This policy covers information collected through the website. If you go on to become a patient, the clinical information you share during your care is held confidentially and handled in line with professional and legal duties.

6. Who we share your information with

We share your information only with the trusted suppliers who help us run the website and respond to you, namely our website host Squarespace, our email provider Gmail, and Google, as our analytics provider. Each handles your information under terms that protect it. We never sell your personal information, and we do not use it for unrelated marketing. We may disclose information where the law requires it.

7. Storing information outside the UK

Google may process analytics information outside the UK. Where information is processed outside the UK, appropriate safeguards are in place so that it stays protected to UK standards.

8. How long we keep your information

We keep enquiry messages for example 12 months, after which we delete them, unless your enquiry leads to care and the information becomes part of your records. We keep information only for as long as we need it.

9. How we keep your information safe

We use appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access. These include controlled access, secure storage, and confidentiality obligations on everyone who works with us. No system can be guaranteed to be completely secure, so we keep our measures under review.

10. Cookies and analytics

Cookies are small text files placed on your device when you visit a website. The cookies we use fall into two groups.

•     Strictly necessary cookies, which the site needs in order to work. These do not require your consent.

•     Analytics cookies, set by Google Analytics, which count visits and show how the site is used. We set these only with your consent.

When you first visit, our cookie banner lets you accept or refuse analytics cookies, and analytics will not run until you accept. You can change your choice at any time through the cookie settings on our website, and you can block or delete cookies through your browser settings. Refusing analytics cookies will not stop you using the site.

11. Your rights

Under UK data protection law you have a number of rights over your information. You can:

•     Ask for a copy of the information we hold about you.

•     Ask us to correct information that is wrong or incomplete.

•     Ask us to delete information, where there is no overriding reason to keep it.

•     Ask us to restrict or object to how we use your information in certain situations.

•     Withdraw any consent you have given, at any time, without affecting earlier use.

To exercise any of these rights, please contact us using the details in section 1. We will respond within one month, and we will tell you if we need longer because a request is complex. There is normally no charge. We may need to confirm your identity first, as this protects your information.

12. How to raise a concern or complaint

If you are unhappy with how we have handled your information, please tell us first, so that we have the chance to put things right. You have a right to complain to us directly. We will acknowledge your complaint within 30 days and respond without undue delay.

You can also complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would, however, welcome the chance to address your concern first.

13. Changes to this policy

We may update this policy from time to time. When we make changes, we will revise the date at the top, and where the changes are significant we will make this clear on the website.

14. How to contact us

For any question about this policy or your information, please contact us at Alice.murray@gmail.com, +44 7887 667008.