1. Introduction

We are committed to protecting your privacy and handling your personal data with transparency, care, and in accordance with UK GDPR and the Data Protection Act 2018.

This policy explains how Reach Rehabilitation Physiotherapy collects, uses, stores, and protects your personal information — including data gathered through our website, clinic services, and FutureFIT assessments.

---

2. Who We Are

Reach Rehabilitation Physiotherapy

info@reachrehabphysio.co.uk
01856 480440
Data Controller: Mary Cowieson, Founder and Lead Physiotherapist

---

3. What Information We Collect

We may collect and process the following types of personal data:

• Contact details: name, address, phone number, email
• Health information: medical history, assessment results, treatment notes
• Appointment data: booking history, session attendance
• Website usage: IP address, browser type, pages visited (via cookies)

---

4. How We Use Your Information

We use your data to:

• Provide physiotherapy and FutureFIT services
• Communicate with you about appointments and care
• Generate personalised reports and progress tracking
• Share relevant information with your GP or care team (with consent)
• Improve our services and website experience

We do not use your data for marketing without your explicit consent.

---

5. Lawful Basis for Processing

We process your data under the following lawful bases:

• Consent: when you agree to receive communications or share reports
• Contract: to deliver physiotherapy and FutureFIT services
• Legal obligation: to comply with health regulations and record-keeping
• Vital interests: in case of medical emergencies

---

6. How We Store and Protect Your Data

Your data is stored securely using encrypted systems, including WriteUpp and password-protected files. We take all reasonable steps to prevent unauthorised access, loss, or misuse.

Data is retained for a minimum of 8 years (or longer for paediatric records) in line with HCPC and CSP guidelines.

---

7. Sharing Your Information

We may share your information with:

• Your GP or healthcare provider (with consent)
• Allied health professionals involved in your care (with consent)
• Legal or regulatory bodies if required by law

We do not sell or share your data with third parties for marketing.

---

8. Your Rights

You have the right to:

• Access your personal data
• Request correction or deletion
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact us at info@reachrehabphysio.co.uk

---

9. Cookies and Website Analytics

Our website uses cookies to improve functionality and understand visitor behaviour. You can manage cookie preferences through your browser settings.

---

10. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website.

---

11. Contact Us

If you have any questions about this policy or how your data is handled, please contact:

Mary Cowieson
Email: info@reachrehabphysio.co.uk
Phone: 01856 480440