Introduction
North Physiotherapy (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and share your personal information when you visit or use our website https://northphysiotherapy.co.uk and related services, in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data protection laws.
By using our website and services, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect personal information that you voluntarily provide to us, including but not limited to:
- When you book an appointment or contact us through our website or phone.
- When you complete any forms, provide feedback, or sign up for updates.
- Any other information relevant to the services we provide (such as medical history and health information, if required for treatment).
The personal information we may collect includes:
- Your full name, date of birth, and gender.
- Contact details such as your email address, phone number, and postal address.
- Health and medical information related to your treatment.
- Payment and billing details where applicable.
We also collect non-personal data such as your IP address, browser type, and interaction with our website for analytics purposes, using cookies and similar technologies.
2. How We Use Your Information
We use the information we collect to:
- Provide and manage your physiotherapy treatment.
- Schedule and manage appointments and communicate with you about your care.
- Respond to your enquiries and provide customer support.
- Maintain clinical records in accordance with legal and regulatory obligations.
- Process payments where necessary.
- Send newsletters or marketing communications, if you have opted in to receive them.
- Monitor and improve the quality of our services and website.
We will not process your data in any way that is incompatible with the purposes outlined above, unless we are required to do so by law.
3. Legal Basis for Processing Your Data
We process your personal data under the following legal bases:
- Consent: Where you have given explicit consent, such as for marketing purposes.
- Contract: Where processing is necessary for the performance of a contract with you, such as providing physiotherapy services.
- Legal Obligation: Where we are required to comply with a legal obligation, such as maintaining medical records.
- Legitimate Interests: Where processing is necessary for our legitimate interests, such as improving our services, provided these do not override your fundamental rights and freedoms.
4. Sharing Your Information
We will only share your personal data with third parties in the following circumstances:
- With medical professionals or specialists involved in your care, where necessary and with your consent.
- With trusted third-party service providers who support our operations (such as appointment booking systems or IT providers), who will only process your data under strict confidentiality agreements.
- When required to comply with legal obligations, such as sharing information with regulatory bodies or law enforcement agencies.
We will never sell or rent your personal data to third parties.
5. Data Retention
We will retain your personal data for as long as is necessary to fulfil the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements. By law, we are required to keep certain medical records for a minimum period (e.g. at least 8 years after your last treatment for adults, or until the age of 25 for children, whichever is longer).
6. Data Security
We take appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access. While we strive to protect your information, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your Rights
Under the UK GDPR, you have certain rights regarding your personal data, including:
- Right to Access: You can request access to the personal information we hold about you.
- Right to Rectification: You can request correction of any inaccurate or incomplete data we hold.
- Right to Erasure: You can request that we delete your personal data in certain circumstances.
- Right to Restrict Processing: You can request that we limit how we use your data.
- Right to Object: You can object to us processing your data in certain circumstances.
- Right to Data Portability: You can request a copy of your data in a machine-readable format for transfer to another service provider.
- Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at meena@northphysioclinic.co.uk. We may ask for additional information to confirm your identity before responding to your request.
8. Cookies
We use cookies and similar technologies on our website to enhance your user experience and gather analytics on website traffic. You can manage your cookie preferences via your browser settings. For more details, please refer to our Terms and Conditions.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations. Any updates will be posted on this page with a revised “Last Updated” date. We encourage you to review this policy regularly.
11. Contact Us
If you have any questions, concerns, or would like to exercise any of your data protection rights, please contact us at:
North Physiotherapy
Address: Alexandra Mills, Alexandra Rd, Batley WF17 6JA
meena@northphysioclinic.co.uk
07779839964
Alternatively, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection issues, at https://ico.org.uk.
Last Updated: 14/09/2024