We are committed to protecting and preserving the privacy of our visitors when visiting our site or communicating electronically with us.

This policy sets out how we process any personal data we collect from you or that you provide to us through our website. We confirm that we will keep your information secure and that we will comply fully with all applicable UK Data Protection legislation and regulations. Please read the following carefully to understand what happens to personal data that you choose to provide to us, or that we collect from you when you visit this site. By visiting our website, you are accepting and consenting to the practices described in this policy.
Who we are:

The data controllers is Wyatt Physiotherapy.
Wyatt Physiotherapy is a Physiotherapy Private Practice.
Our registered address is 121 Lions Lane, Ashley Heath, Ringwood BH24 2HJ.
If you have any questions about this Privacy Policy, you can get in contact by writing to info@wyattphysiotherapy.com

Types of information we may collect from you:
We may collect, store and use the following kinds of personal information about individuals who visit and use our website:

Information you supply to us
You may supply us with information about you by filling in forms on our website. This includes information you provide when you submit a contact/enquiry form. The information you give us may include your name, address, date of birth, e-mail address, phone number and payment details (where relevant).
Case Studies, Testimonials and Images on our website and marketing have been obtained and names collected with the individual's consent. We will always seek consent before using any public material on our website and marketing.

Information our website automatically collects about you
With regard to each of your visits to our website we may automatically collect information including the following: technical information, including a truncated and anonymised version of your Internet protocol (IP) address, browser type and version, operating system and platform;
information about your visit, including what pages you visit, how long you are on the site, how you got to the site (including date and time); page response times, length of visit, what you click on, documents downloaded and download errors.

Cookies
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our ‘Cookie Policy’.

How we may use the information we collect

We use the information in the following ways:
-To provide you with information and/or services that you request from us.
-To administer our site including troubleshooting and statistical purposes.
-To improve our site to ensure that content is presented in the most effective manner for you and for your computer.
-For security and debugging as part of our efforts to keep our site safe and secure

This information is collected anonymously and is not linked to information that identifies you as an individual. 

Disclosure of your information (Third-Party Links)
Any information you provide to us will either be emailed directly to us or may be stored on a secure server. We use a trusted third-party hosting provider (Wix) to facilitate the running and management of this website.

Our site may, from time to time, contain links to and from the third-party websites. If you follow a link to any of these websites, please note that these websites have their own Privacy Policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

If you have voluntarily opted in and consented to receive updates about our service, you may opt out at any time. You have a right at any time to stop us from contacting you for marketing purposes.

In some of our e-mail messages we use a ‘click through URL’ linked to third party websites- YouTube, Facebook, Instagram etc. We may track click-through data to assist in determining interest in particular topics and measure effectiveness of these communications.

We do not rent, sell or share personal information about you with other people or non-affiliated companies. Any external sources used by our website such as mailing lists from service providers such as ‘mailchimp’, are subject to their own user agreement per the terms of your account with the provider themselves.

People who enquire about our service via Social Media
Messages from people who contact us via Facebook and Instagram via the direct message function will be stored in our inbox.
People Who Enquire about Our Service by Telephone
In order to provide information about our service to people who enquire for the first time, we need to hold the details of the person who requested this information. The information will be used to fulfil your enquiry.
People who enquire about our Service by Email
In order to provide information about our service to people who enquire for the first time, we need to hold the details of the person who requested this information. The information will be used to fulfil your enquiry.
People Who Register as New Clients

See separate ‘Privacy Notice for Clients’.

Security of your information
We will use all reasonable efforts to ensure that your personal data is not disclosed to regional/national institutions and authorities, unless required by law or other regulations.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. 
Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Your rights
You have the right to object to the processing of your personal data, based on your situation, where this processing is based on the legitimate interests of Wyatt Physiotherapy, where it involves direct marketing, or where it is completed for research purposes.

You can withdraw consent to the use of your information. All our marketing communications contain an unsubscribe link.
You have the right to ensure that your personal data is being processed lawfully (“Subject Access Right”). Your subject access right can be exercised in accordance with data protection laws and regulations. Any subject access request must be made in writing to us at our email address listed on our contact page. We will provide your personal data to you within the statutory time frames. To enable us to trace any of your personal data that we may be holding, we may need to request further information from you. 

Complaints/Concerns 
If you have concerns or questions over the collection, storage or processing of your data please contact us.
If you have a complaint about how we have used your information, you have the right to complain to the Information Commissioner’s Office (ICO).

Changes to our Privacy Policy
We keep our Privacy Policy under review. Any changes we may make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.
The Privacy Policy was last updated in January 2023.

Contact
Questions, comments and requests regarding this Privacy Policy are welcomed and should be submitted via email using the address or contact form on our website.

Privacy Notice for Clients Wyatt Physiotherapy

We take seriously our obligations to protect your privacy. The General Data Protection Regulation, incorporated in the UK by The Data Protection Act 2018 (the Act), requires us to provide you with important information on how we collect and use your personal data.

Your data is processed by Wyatt Physiotherapy, whose principal business address is 121 Lions Lane, Ashley Heath, Ringwood BH24 2HJ. For the purpose of the Act, Wyatt Physiotherapy is defined as a data controller. 
We can only process your data if there is a legal basis for doing so. We rely on three legal bases for processing your data. These are: your consent, which you can withdraw at any time; our legitimate business interests; and the proper management of a contract to which you are a party.

We must also specify the purposes for processing your data. The purpose of processing your data is because you have asked for something to be done so that you can enter into a contract, or is in relation to a contract which you already have with us.

We need to inform you of other parties who we may share your data with. Internally we may need to share your data between professionals. We may need to share your data externally with Case Managers, GP’s, Physiotherapists, Consultants, Technology Providers, and any other Healthcare Professionals in order to keep them updated of your treatment with us. Additionally, we use an external cloud-based system for electronic notes and to process your data. Any contractors with whom we share data about you, or who generate data as a result of our request, will be required to delete your data as soon as they have concluded the service provided to us/you.

Importantly, you have a number of rights with regard to the data that we hold about you. For example, you can request access to your data, and can require that we rectify or erase it. Your requests will be properly considered. However, this does not automatically mean that we will agree to your request, as we may have other obligations that outweigh your rights.

We retain your data for a number of reasons and will only keep it for as long as is necessary. Some of the time limits imposed on us are as a result of our statutory obligations.
Financial Data must be kept for 6 years.

Adult’s Client Records- 8 years after conclusion of treatment or death.
Children’s Client Records- Until the patient’s 25th birthday or 26th birthday if the young person was 17 at conclusion of treatment, or 8 years after death.

Medical Legal Client records- external documentation is destroyed upon completion of case.
The legislation covering data protection is quite complex. We have tried to keep this document brief and clear to help you understand your rights in respect of the personal data that we process. Should you require further information or in the event that you are not content with how we are managing your personal data, please contact us.

You should also be aware that you have the right to lodge a complaint with the UK’s independent data regulator, the ICO, see details below.
https://ico.org.uk/concerns/
ICO helpline 0303 123 1113