Legal
Privacy policy
Last updated: [DATE]
Placeholder wording. Have this reviewed by a solicitor before the site goes live, particularly the sections covering client health data.
Who we are
The Physio System is operated by [LEGAL ENTITY NAME], registered in [JURISDICTION] under company number [COMPANY NUMBER], at [REGISTERED ADDRESS]. You can reach us at hello@thephysiosystem.com.
What this policy covers
This policy covers personal data we collect through this website, for example when you book a call or send us a message.
It also explains our role when we host and support a clinic platform. In that case the clinic is the data controller for its own client records and we act as a data processor on the clinic’s instructions, under a written data processing agreement. [CONFIRM WITH SOLICITOR]
Data we collect from this website
When you submit a form we collect your name, email address, clinic name if you give one, and anything you write in the message field. We use it to reply to you and to keep a record of the enquiry.
We use the Meta Pixel to measure the performance of our advertising. [DESCRIBE COOKIE AND CONSENT APPROACH]
Client health data
Clinic platforms we build hold client records, consultation forms and session notes. Health information is special category data under UK GDPR and is treated accordingly.
Data is stored on servers located in the UK or the European Economic Area. Access is limited to the clinic and to the members of our team who need it to provide support. [CONFIRM HOSTING LOCATIONS AND SUB-PROCESSORS]
How long we keep data
[RETENTION PERIODS]
Who we share data with
We use third parties to run the service, for example payment processing, email delivery, calendar synchronisation and hosting. [LIST SUB-PROCESSORS]
We do not sell personal data.
Your rights
Under UK GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. To exercise any of these, contact us at hello@thephysiosystem.com.
You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
We will update this page if our practices change, and update the date at the top.