Your privacy is part of what we do.
Heritage Physiotherapy is the Data Controller of this site and is registered with the Office of the Data Protection Commissioner. This policy explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others, and what choices you have. It relates to all our business activities and not just our website.
By using our services, you are agreeing to be bound by this Policy. Heritage Physiotherapy may change its policy from time to time by updating this page, so please review this page occasionally to ensure you are happy with any changes.
Any questions regarding this policy or our privacy practices should be sent via email to: heritagephysiotherapyclinic@gmail.com.
In line with GDPR regulations, this policy is regularly updated and remains in active effect.
1. Who are we?
We are Heritage Physiotherapy, a private physiotherapy clinic based in Haddenham, Cambridgeshire. We offer professional physiotherapy, massage, acupuncture, and physio-led Pilates classes. Our full contact details can be found on our contact page.
2. How do we collect information from you?
We obtain information about you when:
- You visit our website
- You book an appointment for any of our clinical services
- You contact us to enquire about our services
- You create a user account for online booking via our PracticePal system
- You choose to write and submit a testimonial
- We receive correspondence from other healthcare professionals or insurance intermediaries involved in your care
- You email us completed health screenings or referral forms
3. What information do we collect and how is it used?
We collect personal details (such as your name, contact phone, email, and billing address) in order to manage bookings and contact you.
3.0 Sensitive Data
We collect sensitive personal data relating to health matters, clinical histories, and treatment logs which are essential for providing safe and effective physiotherapy treatment. This sensitive data is gathered solely with your explicit consent (or the consent of a legal representative). We do not collect other forms of sensitive information (e.g. religious beliefs, political views, genetic/biometric profile data).
3.1 Children's Information
Our treatments may occasionally be directed to children under 16. Any relevant medical history or contact details are only collected with the explicit consent of the individual holding parental responsibility for that child.
3.2 Third Parties
We will not rent or sell your information to third parties. We will not share your information with third parties for marketing purposes. Your clinical data and bookings are securely stored in PracticePal, our GDPR-compliant clinic management system, in accordance with legal requirements for medical records.
4. Controlling your information
You have clear rights concerning the information we hold about you under the General Data Protection Regulation (GDPR). If you wish to exercise these rights, please get in touch.
4.0 Accessing your information
You have the right to request a copy of the personal and medical data we hold about you. We will provide this information upon request.
4.1 Correcting your information
If your email, phone, or address changes, or if you believe any information we hold is out-of-date or incorrect, please let us know so we can update our records.
4.2 Deleting your information
You have the right to request the deletion of your personal data. Please note that medical practitioners have statutory obligations to retain medical records for a set period. We will delete any personal information that we are not legally required to keep.
5. Use of 'cookies'
Our website may use standard technical cookies. Cookies help analyze web traffic and allow web applications to respond to you as an individual. We only use traffic logs for statistical analysis, and these files do not give us access to your computer or any personal files. You can choose to decline cookies via your web browser settings.
6. Security
Heritage Physiotherapy takes the security of your clinical records very seriously. To prevent unauthorised access, loss, or disclosure, we use secure, encrypted medical management software (PracticePal) and keep clinical spaces protected.
7. Complaints
If you wish to raise a complaint about how we have handled your personal or medical data, please contact us directly by email so we can investigate and address the matter.