Privacy Policy

GLO Physiotherapy is committed to protecting your personal data and respecting your privacy. We are registered with the Information Commissioner’s Office (ICO) as a data controller under the Data Protection Act 2018. This policy outlines how we collect, use, store, and safeguard your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

1. Who We Are

Data Controller: GLO Physiotherapy (Sole Trader)

ICO Registration Number: ZC080830
Email: hello@glophysio.co.uk

​
​

2. What Information We Collect

We may collect and store the following information:

• Personal details (name, date of birth, address, email, phone number)

• Medical and health information relevant to your physiotherapy care

• Appointment and attendance records

• Payment and invoice records

• Correspondence (emails, messages)

• Video consultation data (online appointments – not recorded)
   

3. How Your Information Is Used

Your data is used to:

• Provide safe and effective physiotherapy treatment

• Maintain accurate clinical records

• Communicate with you about appointments and care

• Process payments

• Meet legal, regulatory, and professional obligations

Medical data is processed under special category data rules and handled with strict confidentiality.
 

4. Legal Basis for Processing

We process your data under the following lawful bases:

• Consent – for treatment and communication

• Contract – to deliver booked services

• Legal obligation – record keeping and regulatory compliance

• Legitimate interest – running the physiotherapy practice safely and effectively
   

5. How Your Data Is Stored

• Records are stored securely in password-protected systems

• Paper records (if any) are stored securely

• Only authorised individuals have access

• Data is retained in line with CSP and HCPC guidance (normally 8 years for adults)
   

6. Sharing Your Information

Your data will not be shared without your consent unless:

• Required by law

• Necessary for safeguarding

• Required for insurance, legal, or regulatory purposes
   

7. Your Rights

You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request erasure (where legally permissible)

• Restrict or object to processing

• Withdraw consent at any time

Requests should be made in writing to the contact details above.
 

8. Complaints

If you are unhappy with how your data is handled, please contact GLO Physio first.
You also have the right to complain to the Information Commissioner’s Office (ICO).
 

9. Changes to This Policy

This policy may be updated from time to time. The latest version will always apply.