Privacy Policy
Who we are
HSR Physiotherapy & Healthcare ("HSR", "we", "us") provides physiotherapy services, including home visits, and operates this website. We are the data controller for the information described below.
Information we collect
When you request an appointment through this website, we collect your name, email address, telephone number, your preferred way of being contacted, the address we would visit, any access notes you give us, the service and appointment type you are asking for, your preferred dates and times, and a short description of what you would like help with. If you are booking on behalf of someone else, we also collect their name and your relationship to them.
What you tell us about your symptoms or condition is health information, which data protection law treats as a special category requiring extra care. Please include only what we need in order to arrange a suitable appointment. We also collect information you give us directly when you contact us by phone, WhatsApp or email.
Why we use it, and our lawful basis
We use your information to respond to your request, arrange and deliver appointments, and maintain appropriate clinical and administrative records in line with our professional and regulatory obligations. Our lawful basis for handling your contact and appointment details is that it is necessary to take steps at your request before entering into a contract, and to perform that contract. For health information, we rely on the provision of health care by professionals who are subject to a duty of confidentiality.
Who handles your information for us
Our website and booking form are hosted by Cloudflare. The booking form is protected by Cloudflare Turnstile, which checks that a request comes from a person rather than an automated script. Appointment requests are delivered as email by Brevo, whose servers are in the European Union, and are received and stored in a Microsoft Outlook mailbox. Each of these providers handles your information only to provide that service to us.
How long we keep it
Appointment request emails are kept for 12 months and then deleted. Where an appointment goes ahead, clinical records are retained separately for the period required by our professional obligations.
Sharing your information
We do not sell your personal information. We may share information with relevant healthcare professionals involved in your care, or where required by law or professional regulation.
Your rights
Under UK data protection law, you have rights including access to, correction of, and in some circumstances deletion of, your personal information. Contact us using the details on our Contact page to make a request. If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk.
Contact
If you have questions about this policy, please contact us at bookings@hsrphysiohomecareservice.co.uk.