Dr Itunu Johnson

Privacy Policy

Last updated: August 2026

1. Introduction

This privacy notice explains how your personal information is collected, used and protected when you use the website dritunujohnson.com and the clinical services provided under the Dr Itunu Johnson brand.

Two separate legal entities operate clinical services under this brand. Which entity is responsible for your personal data depends on whether you are engaging with the UK or Lagos service.

2. Who is responsible for your data

United Kingdom

Comfortplus Health Ltd, trading as Dr Itunu Johnson, is the data controller for personal information collected in connection with UK clinical services. This includes consultations at The Wellington Hospital (part of HCA Healthcare UK), UK online consultations, selected UK home visits, and care arranged for international patients receiving clinical services in the UK.

Company registered in England and Wales, Company No. 13379382.
Registered office: Pinewood 19 Woodland Way, Oaklands Welwyn, England, United Kingdom, AL6 0RX.
Privacy enquiries: [email protected]

Where clinical care is delivered through The Wellington Hospital or other HCA Healthcare UK facilities, HCA Healthcare UK may separately process your personal data through its own clinical and administrative systems under its own privacy framework. This privacy notice covers only the data processing carried out by Comfortplus Health Ltd.

Nigeria (Lagos)

Comfortplus Health Ltd Nigeria, trading as Dr Itunu Johnson - Lagos Clinic, is responsible for personal information collected in connection with the Lagos clinical service.

Company Registration No. 7112799.
Privacy enquiries: [email protected]

3. Information we collect

We may collect the following types of personal information:

  • Contact details you provide through website forms, including your name, email address and telephone number.
  • Enquiry information such as the subject or type of your enquiry, your preferred appointment date and time, and your postcode or area (for home visit requests).
  • Resource request details when you request access to educational materials, including your name and email address.
  • Technical and usage data collected automatically when you visit the website, including your IP address, browser type, pages visited and referring website. See our Cookie Policy for further detail.

This website provides enquiry and appointment-request forms. It does not store or process full medical records. Any clinical records created during your care are managed through the appropriate clinical systems at the relevant practice location.

4. How and why we use your information

Website enquiries and appointment requests

We use the contact details and enquiry information you submit to respond to your query, arrange appointments or connect you with the appropriate service. The lawful basis for this processing is your consent (by submitting the form) and, where relevant, the performance of a contract or steps taken at your request prior to entering into a contract for clinical services.

Clinical correspondence

Where your enquiry relates to clinical care, we process your information as necessary for the provision of healthcare. In the UK, this may also fall under the lawful basis of processing necessary for medical purposes and the provision of health or social care.

Notification emails

When you submit a form, we send an administrative notification to our team so your enquiry can be reviewed and actioned. These notifications contain only your contact details and the type of enquiry, not the full content of any free-text fields, which are stored securely in our systems.

Website operation and improvement

We use technical data to maintain, secure and improve the website. The lawful basis is our legitimate interest in operating a functional and secure online presence.

5. Third-party service providers

We use a limited number of third-party providers to operate the website and deliver services:

  • Website hosting and infrastructure: the website is hosted on a managed platform that processes technical data as necessary for site delivery.
  • Doctify: an embedded patient review and rating widget is loaded from Doctify and may set its own cookies. See Doctify's own privacy policy for details.
  • HCA Healthcare UK: where clinical care is delivered at HCA facilities, HCA processes patient data under its own data protection arrangements.

We do not sell your personal data to any third party.

6. International data transfers

If you are engaging with the UK service, your data is primarily processed within the United Kingdom. Website hosting infrastructure may involve transfers to servers outside the UK, in which case appropriate safeguards are in place.

If you are engaging with the Lagos service, your data is processed in Nigeria by Comfortplus Health Ltd Nigeria.

International patients arranging care in the UK may have data processed in both the UK and their country of residence as necessary to coordinate their care.

7. Data retention

Website enquiry data is retained for a reasonable period to allow us to respond to and follow up on your enquiry, and for our own record-keeping purposes. We review and delete enquiry records that are no longer needed.

Clinical records are retained in accordance with applicable medical records retention requirements in the relevant jurisdiction.

8. Data security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss or misuse. Form submissions are transmitted over encrypted connections and stored in secured databases.

9. Your rights

Depending on where you are based and which service you are engaging with, you may have the following rights in relation to your personal data:

  • The right to access the personal data we hold about you
  • The right to request correction of inaccurate data
  • The right to request deletion of your data, subject to any legal or regulatory retention requirements
  • The right to restrict or object to certain processing
  • The right to withdraw consent where processing is based on consent
  • The right to data portability where applicable

To exercise any of these rights, please contact the relevant privacy email address listed in section 2 above.

10. Complaints

If you are unhappy with how your personal data has been handled, please contact us first so we can try to resolve your concern.

UK service: if you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Lagos service: you may contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

11. Cookies

This website uses cookies and similar technologies. For full details of the cookies in use and how to manage them, please see our Cookie Policy.

12. Changes to this policy

We may update this privacy notice from time to time. Any changes will be posted on this page with an updated revision date.

13. Contact

For privacy enquiries relating to UK services:
[email protected]

For privacy enquiries relating to the Lagos service:
[email protected]