Privacy Policy

01

Who we are

This website is operated by LC Physiotherapy and Performance Ltd, a company registered in England and Wales (company number: 16869242).

For the purposes of UK data protection law, LC Physiotherapy and Performance Ltd is the data controller of the personal information collected through this website.

02

Data we collect

Information you give us

When you contact us by email or telephone to enquire about or book an appointment, we may collect:

• Your name and contact details (email address, phone number)
• Relevant health information you share in connection with your physiotherapy care
• Any other information you choose to provide

Information collected automatically

When you visit this website, we automatically collect certain technical information via Google Analytics, including:

• Pages visited and time spent on the site
• Your approximate geographic location (country/city level)
• Device type, browser, and operating system
• How you arrived at the site (e.g. from a search engine or direct link)

This data is collected in an aggregated, anonymised form and does not directly identify you. See Section 5 for details on cookies.

03

How we use your data

We use the information we collect to:

• Respond to enquiries and manage appointment bookings
• Provide and deliver physiotherapy services
• Maintain clinical records as required by our professional regulatory bodies (HCPC and CSP)
• Improve this website based on aggregated analytics data
• Comply with legal and regulatory obligations

We will not use your personal data for marketing purposes without your explicit consent.

04

Legal basis for processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

Contract performance

Processing your contact and appointment information is necessary to fulfil the contract for physiotherapy services.

Legitimate interests

We use Google Analytics data based on our legitimate interest in understanding how our website performs, provided this does not override your privacy rights. We obtain your consent for analytics cookies before they are placed on your device.

Legal obligation

We are required to maintain clinical records under the rules of the Health and Care Professions Council (HCPC) and the Chartered Society of Physiotherapy (CSP).

Special category data

Health information is classified as special category data under UK GDPR. We process this data on the basis of Article 9(2)(h) — for the purposes of providing healthcare and managing healthcare services.

05

Cookies & analytics

This website uses cookies — small text files placed on your device. We use the following categories of cookies:

Strictly necessary cookies

These cookies are essential for the website to function and cannot be switched off. They do not store any personally identifiable information.

Analytics cookies (Google Analytics)

With your consent, we use Google Analytics to collect anonymised data about how visitors use this website. Google Analytics uses cookies to distinguish users and sessions. The data is processed by Google LLC, which may transfer data to the United States under Standard Contractual Clauses.

You can withdraw your consent at any time using the cookie settings link in the footer of this page, or by installing the Google Analytics Opt-out Browser Add-on.

06

Who we share data with

We do not sell your personal data. We may share it only in the following limited circumstances:

• Google LLC — for website analytics (see Section 5)
• Other healthcare professionals — where clinically appropriate and with your knowledge, for example when writing referral letters
• Regulatory bodies — the HCPC or CSP, if required as part of a professional investigation or complaint
• Legal authorities — if we are required to disclose information by law, court order, or in connection with legal proceedings

07

How long we keep data

We retain personal data only for as long as necessary:

• Clinical records: A minimum of 8 years from the date of last treatment (or until the patient's 25th birthday if they were a minor), in line with HCPC guidance
• General enquiry emails: Up to 2 years, unless an ongoing relationship is established
• Analytics data: As configured in Google Analytics (default retention is 14 months)

After these periods, data is securely deleted or anonymised.

08

Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data, subject to legal retention requirements
• Right to restrict processing — to ask us to limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent (e.g. analytics cookies), you may withdraw at any time

To exercise any of these rights, please contact us using the details in Section 9. We will respond within one calendar month.

09

Contact & complaints

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: