Privacy Policy

4. Sharing Your Personal Data

We will never sell your personal data. We share your data only with trusted service providers and only for operational purposes, including but not limited to:

• Zanda – our clinical management system (based in Australia)

• Stripe – our payment processor (based in the USA)

These providers act as processors on our behalf and are bound by written data processing agreements to ensure compliance with UK GDPR standards.

5. International Data Transfers

Because some of our service providers are based outside the UK and EEA, your personal data may be transferred internationally. We ensure such transfers comply with applicable data protection laws by implementing safeguards such as:

• The UK International Data Transfer Agreement (IDTA)

• Standard Contractual Clauses (SCCs) approved for use in the UK

Where applicable, we also ensure that providers are subject to an adequacy decision by the UK government.

6. How Long We Keep Your Data (Retention)

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements. Examples:

• Patient and transaction records – kept for up to 8 years for adults, and eight years after a child's 18 birthday or until 25 years of age for children. Please note that other types of records may need to be stored indefinitely to comply with tax and healthcare record keeping laws.

• Marketing information – kept until you unsubscribe or withdraw consent.

• Website analytics data – kept for up to 26 months before anonymisation or deletion.

7. Children’s Data

Our services are currently not designed for children but may be used by individuals under the age of 18 only with parental or guardian consent. We do not knowingly collect personal data from children without appropriate consent. If you believe we have collected data from a minor without consent, please contact us immediately at admin@thelondonphysio.co.uk

8. Your Rights Under UK GDPR

You have the right to:

• Be informed about how we use your data

• Access your personal data

• Request correction (rectification) of inaccurate data

• Request erasure of your personal data

• Restrict or object to processing

• Data portability

• Not be subject to solely automated decisions that have legal or similarly significant effects

How to exercise your rights:
You can contact us at admin@thelondonphysio.co.uk. We will respond to valid requests within one month, or notify you if we require more time (up to two further months for complex requests). We may request proof of identity before acting on your request.

9. Cookies and Tracking

We use cookies and similar technologies to improve user experience, analyse traffic, and for security purposes. Non-essential cookies will only be placed on your device if you consent. You can manage your cookie preferences via your browser settings or through our cookie consent tool.

For more details, please see our separate Cookies Policy.

10. Data Security

We use appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. While we strive to protect your data, no internet transmission is completely secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post any updates on this page with a revised “Last updated” date. If changes are significant, we may notify you via email.

12. Contact Us

For any questions, privacy concerns, or to exercise your rights:
Email: admin@thelondonphysio.co.uk
Phone: 0330 133 4502