Last Updated: 15/06/2026
- Who I am
I am a self-employed physiotherapist trading as Home Health Physio, providing physiotherapy assessment, treatment and rehabilitation services in patients’ homes, care homes, and other agreed locations.
For the purposes of UK data protection law, I am the Data Controller responsible for your personal information.
- Contact details
Name: Home Health Physio (Sole Trader)
Email: info@homehealthphysio.co.uk
Phone: +447932544649
Website: www.homehealthphysio.co.uk
- What information I collect
I may collect and process the following information:
Personal information
- Name
- Address
- Date of birth
- Telephone number
- Email address
- Emergency contact details
Health information (special category data)
- Medical history
- Current symptoms and diagnoses
- Medication
- Assessment findings
- Treatment records
- Progress notes
- Relevant GP or consultant information
- Photographs or videos (if clinically necessary and with consent)
Administrative information
- Appointment details
- Communication records (email, SMS, WhatsApp)
- Payment records (BACS or cash transactions)
- Why I collect your information
I use your information to:
- Provide physiotherapy assessment and treatment
- Maintain accurate clinical records
- Communicate with you about appointments and care
- Manage administration and payments
- Liaise with other healthcare professionals where appropriate
- Meet legal, professional and insurance obligations
- Lawful basis for processing
Under UK GDPR, I process your personal data because:
- It is necessary for the provision of healthcare treatment
- It is necessary to comply with legal and regulatory obligations
- It is necessary for the establishment, exercise or defence of legal claims
- How your information is stored and protected
I take appropriate steps to protect your information, including:
- Password-protected devices
- Full device encryption (where enabled)
- Secure storage of clinical records
- Restricted access to patient information
- Secure backups where applicable
Patient information is only accessed when necessary for your care.
- Communications
I may communicate with you using:
- Telephone
- SMS
WhatsApp may be used for appointment management and routine communication. It should not be used for medical emergencies.
Where clinically relevant information is received via electronic communication, a summary may be recorded in your clinical notes.
- Sharing your information
Your information may be shared with:
- Your GP
- Other healthcare professionals involved in your care
- Care home staff (where applicable and relevant)
- Insurance providers (where necessary)
- Legal or regulatory bodies where required by law
Information will only be shared when there is a lawful basis to do so.
- How long I keep your information
Clinical records are retained for a minimum of 8 years after the end of treatment, or longer where required by law, insurance requirements, or professional guidance.
- Your rights
You have the right to:
- Access your personal information
- Request correction of inaccurate information
- Request restriction of processing
- Object to certain uses of your data
- Request information about how your data is used
- Lodge a complaint with the Information Commissioner’s Office (ICO)
- Subject Access Requests
You may request a copy of the information I hold about you at any time. I will respond within one calendar month of receiving a valid request and confirming identity.
- Data retention and deletion
When records are no longer required, they will be securely deleted or destroyed in accordance with professional and legal requirements.
- Changes to this notice
This Privacy Notice may be updated from time to time. The most recent version will always be available on request or via my website.
- Contact and complaints
If you have concerns about how your data is handled, please contact me in the first instance.
You also have the right to complain to:
Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk