Privacy Policy
Effective Date: 1st January 2025.
1. Who We Are
Burton Physio Group operates physiotherapy clinics in:
– Burton-on-Trent (Burton Physiotherapy & Spinal Centre)
– Derby (Burton Physio Group Derby)
We are the Data Controller for the personal data we process. If you have any questions about this policy or your data, please contact us (see Section 10).
2. Personal Data We Collect
We may collect and process the following categories of personal data:
– Identity Information: Name, date of birth, gender.
– Contact Details: Address, phone number, email.
– Health and Clinical Data: Medical history, diagnosis, treatment notes, referral letters, GP and insurer details.
– Financial Information: Payment records, insurance billing data.
– Technical Data: IP address, browser type, and usage data if you interact with our website.
We collect this data directly from you, your referring practitioner, or third-party insurers (with your permission).
3. Lawful Basis for Processing
Under the UK GDPR, we must have a lawful basis for using your data. These may include:
– Consent: Where you’ve given explicit consent (e.g. marketing communication).
– Contract: To provide physiotherapy services and manage appointments.
– Legal Obligation: To meet regulatory or tax requirements.
– Vital Interests: For safeguarding health or life in emergencies.
– Legitimate Interests: To operate and improve our business and services, except where your rights override ours.
– Provision of Healthcare: Special category data (e.g. medical notes) is processed under Article 9(2)(h) – for the provision of healthcare.
4. How We Use Your Data
We use your personal data to:
– Deliver safe and effective physiotherapy care.
– Communicate with you about appointments and treatment.
– Liaise with healthcare professionals, insurers, or solicitors (where relevant and permitted).
– Administer billing and payments.
– Maintain accurate clinical records.
– Improve service quality and ensure clinical governance.
– Comply with our legal and regulatory obligations.
5. Sharing Your Data
We may share your data with:
– Your GP, consultant, or referring practitioner (with consent).
– Private medical insurers, if you’re claiming treatment costs.
– Our trusted service providers (e.g. secure cloud systems, practice management software).
– Regulatory bodies or legal authorities where required by law.
We will never sell your personal data or share it for marketing purposes without your explicit consent.
6. Data Retention
We retain your data in line with legal and professional requirements:
– Adults: 8 years after last treatment.
– Children: Until the patient’s 25th birthday (or 26th if treated at age 17).
After this period, records will be securely deleted or destroyed.
7. Your Rights Under UK GDPR
You have the right to:
– Access your personal data.
– Request correction of any inaccurate information.
– Request deletion of data (where legally appropriate).
– Restrict or object to certain processing.
– Data portability (in certain cases).
– Withdraw consent at any time (where processing is based on consent).
– Lodge a complaint with the Information Commissioner’s Office (ICO).
Visit www.ico.org.uk or call 0303 123 1113 for more information.
8. Data Security
We implement appropriate security measures to protect your personal data, including:
– Secure storage and encryption of electronic records.
– Access restricted to authorised personnel only.
– Staff training in data protection and confidentiality.
9. Cookies and Website Use
Our website may use cookies to improve functionality and user experience. Cookies are small files stored on your device. You can manage your cookie preferences through your browser settings.
10. Contact Details
If you have any questions or concerns about this Privacy Policy or your data:
Burton Physio Group
Email: admin@burtonphysiogroup.com
Phone: 01283 741555
Address: Burton Physio Group, Coach House, Manor Drive, Burton on Trent, DE14 3RW
Website: www.burtonphysiogroup.com
11. Updates to This Policy
We may update this Privacy Policy from time to time in line with changes to the law or our business practices. Please check our website for the latest version.
