Privacy Policy
Privary Policy - Restore Physiotherapy
Effective of: 18th May 2026
1. Introduction
At Restore Physio, we are commited to protecting and respecting your privacy. This privary policy explains how we collect, use, store and protect your personal information when you use our physiotherapy services, visit our website or contact us.
We process personal data in accordance with the UK General Date Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
Restore Physiotherapy
Email: helen.richardson@restorephysio.uk
Phone: 07772125476
For the purpose of data protection law, we are the "data controller" of your personal information.
3. Collected Personal Data
We may collect and process the following information:
Personal information:
- Name
- Date of Birth
- Address
- Email Address
- Telephone Number
- Emergency Contact Details
Health Information:
- Medical History
- Injury Details
- Assessment Notes
- Treatment Records
- GP or Consultant Information
- Exercise programmes and rehabilitation plans
- Treatment related images
Financial Information:
- Payment details
- Billing information
- Insurance Details (if applicable)
Website Information:
If you use our website, we may collect:
- IP address
- Browser type
- Website usage data
- Cookies and analytics information
4. How We Use Your Information
- We use your information to:
- Provide physiotherapy assessment and treatment
- Maintain clinical records
- Communicate regarding appointments and care
- Process payments and invoices
- Improve our services
- Meet legal and professional obligations
- Respond to enquiries
- Manage safeguarding or medical emergencies where neccessary
We only use your information where we have a lawful basis to do so.
5. Lawful Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
- Performance of a contract – to provide physiotherapy services
- Legal obligation – for healthcare and record-keeping requirements
- Legitimate interests – to operate and improve our business
- Consent – where required for marketing communications
- Healthcare provision – processing special category health data for treatment purposes
6. Sharing Your Information
We will keep your information confidential and only share it when necessary, including with:
- GPs or healthcare professionals (with your consent where appropriate)
- Insurance providers
- Professional advisers
- Regulatory or legal authorities where required by law
- Secure software providers used for practice management
We do not sell your personal information to third parties.
7. Data Storage and Security
We take appropriate security measures to protect your information against unauthorised access, loss, misuse, or disclosure.
Your records may be stored:
- Electronically using secure systems
- In locked physical storage where applicable
Only authorised personnel have access to your information.
8. How Long We Keep Your Information
We retain healthcare records in line with professional and legal guidance.
Typically, physiotherapy records are retained for:
- Adults: 8 years after last treatment
- Children: until age 25 (or 26 if treatment ended at age 17)
Records may be retained longer where legally necessary.
9. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure of data (where applicable)
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent where processing is based on consent
To exercise these rights, contact us using the details above.
10. Cookies and Website Tracking
Our website may use cookies to improve user experience and analyse website traffic.
You can control cookies through your browser settings.
See our Cookie Policy for further information.
11. Marketing Communications
We may occasionally send updates or health information if you have opted in to receive them.
You can unsubscribe at any time by contacting us or using the unsubscribe link in emails.
12. Complaints
If you have concerns about how your information is handled, please contact us first so we can resolve the issue.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):