Privacy policy.

Atlas Physiotherapy Clinic (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use our website or services.

Who we are

The data controller is Connor Samuel Jayes, trading as Atlas Physiotherapy Clinic, a sole-practitioner physiotherapy clinic based at Brogdale Farm, Brogdale Road, Faversham, Kent ME13 8XZ.

We are registered with the Information Commissioner’s Office (ICO) under registration number ZB740448. Connor is a chartered physiotherapist registered with the Health and Care Professions Council (HCPC PH110273) and a member of the Chartered Society of Physiotherapy (CSP 101094).

What information we collect

We may collect the following personal data:

• Name, email address, and phone number (via the booking form)
• Information about your health condition or reason for seeking treatment
• Your preferred appointment date and time
• Insurance provider details
• Any additional information you choose to provide

How we use your information

We use the information you provide to:

• Respond to your booking enquiry and confirm your appointment
• Provide physiotherapy treatment and maintain your clinical record
• Contact you regarding your appointment or follow-up care
• Comply with our legal and regulatory obligations as healthcare providers

We will not use your personal data for marketing purposes without your explicit consent.

Legal basis for processing

We process your personal data on the basis of legitimate interests (responding to your enquiry), contractual necessity (providing treatment), and legal obligation (maintaining clinical records as required by our professional regulatory body, the HCPC).

Where we process special category health data, we do so on the basis of providing healthcare treatment (Article 9(2)(h) UK GDPR).

Data sharing

We will not sell, rent, or share your personal data with third parties for marketing purposes. We may share information:

• With your GP or other healthcare providers where clinically appropriate and with your consent
• With your health insurer to process a claim (with your authorisation)
• Where required by law or regulatory authorities

We use Resend (a US-based email service provider) to process booking form submissions and to send Recovery Guides. Appropriate data transfer safeguards are in place.

Recovery Guide requests

If you request one of our free Recovery Guides, we collect your name, email address and telephone number, together with which guide you asked for. We use these to email you the guide, to give you secure access to it, and to record that you requested the access page and requested the download.

We record which guide is associated with your request, the version of the guide you were sent, the consent choices you made and the exact wording you were shown when you made them.

We record that the access page was requested and that the download was requested. We do not track whether you opened, read or finished the guide, and we do not use email-open tracking of any kind.

We use Splendina, our own marketing platform, to manage and fulfil Recovery Guide requests, and Resend to send the email. Connor receives a daily summary of the previous day’s requests so he can follow up where you have asked him to; that summary contains your contact details and which guide you requested, and never contains your secure link or anything you wrote in the optional notes field.

Asking to receive occasional health and clinic emails is entirely separate from requesting a guide, is never ticked for you, and is never required in order to receive the guide you asked for. You can withdraw that permission at any time by using the unsubscribe link in any such email, or by emailing us at the address below, and we will act on it without asking you for a reason.

Recovery Guide requests are enquiry records, and are deleted or anonymised after 12 months in the same way as any other enquiry that does not result in treatment.

Data retention

Clinical records are retained for a minimum of eight years after the last treatment date, in accordance with professional guidance. Enquiry records not resulting in treatment, including Recovery Guide requests, are deleted or anonymised after 12 months.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure (subject to our legal retention obligations)
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at Atlasphysiotherapyclinic@protonmail.com.

Cookies

This website does not use tracking or analytics cookies. Essential functionality cookies may be set but contain no personal data.

Changes to this policy

We may update this privacy policy from time to time. Any significant changes will be posted on this page with an updated date.

Contact

If you have any questions about this privacy policy or how we handle your data, please contact us at Atlasphysiotherapyclinic@protonmail.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.