Privacy Policy

---

Privacy Notice

SPARKS Physiotherapy & Performance is committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

SPARKS Physiotherapy & Performance
Address: Advantage Padel, Unit 20 Christchurch Business Park, Radar Way, Mudeford BH23 4FL
Telephone: 07759395348
Email: steve@sparksphysiotherapy.com

We are the data controller for your personal information.

What information we collect

We collect personal and health information to provide physiotherapy care, including:

• Name, contact details, date of birth
• GP and emergency contact details
• Medical history, assessments, and treatment notes
• Appointment, billing, and insurance details (if applicable)

Health information is treated as special category data under UK GDPR.

How we use your information

We use your information to:

• Provide physiotherapy assessment and treatment
• Manage appointments and clinic administration
• Communicate with you and other healthcare professionals involved in your care
• Meet legal, professional, and insurance requirements

We do not use your data for marketing purposes.

Lawful basis for processing

We process your personal data under:

• Article 6(1)(e) – provision of healthcare and clinic administration
• Article 9(2)(h) – management of health and social care

We do not rely on consent as the lawful basis for processing medical records. Consent to treatment is recorded separately as part of clinical care.

How your data is stored

We store patient records securely using Cliniko, a cloud-based practice management system. Cliniko acts as a data processor on our behalf and is contractually required to protect your information.

Paper records (if any) are stored securely with restricted access.

Who we share your data with

We only share information where necessary, including with:

• Your GP
• Other healthcare professionals involved in your care
• Hospitals or specialists we refer you to
• Private medical insurers (where applicable)
• Professional advisers and insurers
• IT and software providers acting as data processors

We may also share information where required by law or court order.

How long we keep your data

• Adult records: minimum of 11 years
• Children’s records: until age 25 (or 11 years after last treatment, whichever is longer)

Your rights

You have the right to:

• Access your personal data
• Request correction of inaccurate information
• Request restriction or object to processing in certain circumstances
• Request deletion where legally possible
• Request data portability

These rights are not absolute and may be limited where we are required to retain medical records.

Accessing your records

You can request access to your records verbally or in writing. We will respond within one month, subject to identity verification.

Complaints

If you have concerns about how we use your data, please contact us first.

You also have the right to complain to the Information Commissioner’s Office (ICO):
www.ico.org.uk | 0303 123 1113

Updates to this notice

We may update this Privacy Notice from time to time. The most recent version will always be available on our website or from the clinic.