Privacy Policy
Last Updated: [23/8/24]
Welcome to Physis, a trusted physiotherapy service provider based in Scotland. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or use our services.
- Who We Are
- www.physis.uk.com is operated by Physis (Caledonian physiotherapy ltd) a physiotherapy service provider based in Edinburgh. Our registered address is 26 Craighall Road, Edinburgh, EH6 4SA.
- For the purposes of data protection laws, Physis is the “data controller” of your personal information.
- Information We Collect
We may collect and process the following types of personal data:
- Personal Identification Information: Name, address, email address, phone number, date of birth, and other relevant personal details.
- Health Information: Information related to your physical health, medical conditions, treatment plans, and history as required for the delivery of physiotherapy services.
- Technical Data: IP address, browser type, operating system, and browsing behaviour, which is collected through cookies or similar technologies.
- Payment Information: Bank details or payment card information for billing purposes.
- How We Use Your Data
We use your personal information for the following purposes:
- Provision of Services: To assess, plan, and provide physiotherapy treatment and to manage your appointments.
- Communication: To respond to your inquiries, provide updates on your treatment, or send you notifications about changes to our services.
- Billing and Payments: To process payments for our services.
- Marketing: If you have opted in, we may send you promotional materials, newsletters, and offers related to our services. You can opt out at any time.
- Legal Compliance: To fulfil our legal obligations, such as keeping medical records in accordance with HCPC healthcare regulations.
- Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you have given clear consent for us to process your personal data for specific purposes, such as marketing communications.
- Contractual Necessity: Where processing your personal data is necessary to deliver the physiotherapy services you have requested.
- Legal Obligation: When we are legally required to process your personal data, such as maintaining healthcare records under Scottish law.
- Legitimate Interests: In some cases, we may process your personal data for our legitimate interests, provided they are not overridden by your rights (e.g., improving our services).
- How We Share Your Data
We may share your personal data in the following ways:
- With Healthcare Providers: If required, with your consent, we will share your health information with other healthcare providers for the purpose of coordinating your treatment.
- With Third-Party Service Providers: We will share your data with trusted third parties who provide services on our behalf, such as payment processing or IT support / medical records platform (PPS Rushcliff). These third parties are bound by confidentiality obligations and only process your data under our instructions.
- Legal Requirements: We may disclose your data to regulatory bodies or law enforcement if required by law or for the protection of our legal rights.
- Data Retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including any legal, accounting, or reporting requirements. Typically, health-related data is retained in accordance with the applicable legal obligations and is held for 7 years.
- Your Data Protection Rights
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
- Right to Erasure: You can request the deletion of your personal data in certain circumstances.
- Right to Restrict Processing: You can ask us to restrict the processing of your data in certain cases.
- Right to Data Portability: You can request the transfer of your data to another service provider.
- Right to Object: You can object to the processing of your personal data in certain cases, such as for direct marketing purposes.
To exercise any of these rights, please contact us using the details provided below.
- Security of Your Data
We are committed to ensuring that your personal data is secure. We have implemented appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction.
- Cookies
We use cookies and similar tracking technologies to enhance your experience on our website.
- Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and where appropriate, you will be notified by email. Please check this page regularly to stay informed about how we are protecting your personal data.
- Contact Us
If you have any questions about this Privacy Policy or the way we handle your personal data, please contact us at:
- Email: [email protected]
- Phone: 0131 478 4646
- Postal Address: Physis, 26 Craighall Road, Edinburgh, EH6 4SA
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe that we have not complied with data protection laws in handling your personal data.