PRIVACY POLICY
Last updated: [1.10.2025]
We are committed to protecting your privacy. This policy explains how we collect, use, store, and safeguard your personal information in compliance with the UK General Data Protection Regulation (UK GDPR).
​
1. Who We Are
We provide physiotherapy and wellness services in London.
Our contact details:
Info@barmpasphysio.com
+44 7988765611
We are the Data Controller of the personal information you provide to us.
​
2. What Information We Collect
When you book or attend an appointment, we may collect:
-
Personal details: name, date of birth, address, phone number, email.
-
Medical information: health history, current conditions, injuries, medications, GP details.
-
Payment information: billing address, payment method (we do not store card details if processed through third-party providers).
-
Technical information: when you use our website, we may collect cookies or analytics data to improve our services.
​
3. How We Use Your Information
We process your personal information to:
-
Provide physiotherapy and related services.
-
Keep accurate clinical records as required by law.
-
Communicate with you about appointments, treatments, or updates.
-
Process payments and manage accounts.
-
Improve our website, services, and customer experience.
-
Comply with legal and regulatory obligations.
​
4. Legal Basis for Processing
We process personal data under the following lawful bases:
-
Consent – where you have given clear consent for us to process your information.
-
Contract – where processing is necessary for providing our services.
-
Legal obligation – where we must comply with regulatory requirements.
-
Legitimate interest – where processing is necessary for our business operations, provided your rights are not overridden.
​
5. How We Store Your Information
-
Records are stored securely (digitally or in paper format).
-
We retain medical records for a minimum of 8 years (or until a child’s 25th birthday if under 18) in line with UK healthcare record-keeping guidelines.
-
After the retention period, records will be securely destroyed.
​
6. Sharing Your Information
We do not sell or trade your personal data.
We may share your information with:
-
Other healthcare professionals (with your consent) if referral or collaboration is needed.
-
Third-party service providers (e.g., payment processors, booking systems) who support our operations.
-
Regulators or legal authorities if required by law.
​
7. Your Data Protection Rights
Under UK GDPR, you have the right to:
-
Access your personal data.
-
Request correction of inaccurate information.
-
Request deletion of your data (where legally possible).
-
Restrict or object to processing.
-
Data portability (request a copy of your data in a usable format).
-
Withdraw consent at any time.
To exercise your rights, contact us at: [Insert contact email].
​
8. Cookies & Website Data
Our website may use cookies and analytics tools to track performance and improve user experience. You can manage cookies through your browser settings.
​
9. Security
We take appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction.
​
10. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on our website with a revised "last updated" date.
​
11. Contact Us
If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact:
Info@barmpasphysio.com
+44 7988765611