Privacy Policy

STRIDE Health & Physiotherapy Ltd provides physiotherapy assessment, treatment and rehabilitation services in Congleton, Cheshire.

We are responsible for the personal information we collect and use in connection with our services.

Contact details:

When you contact us, complete an enquiry form or request an appointment, we may collect:

• Your full name
• Telephone number
• Email address
• Preferred contact time
• Details of your enquiry and appointment preferences

If you proceed with an appointment or receive treatment, we may also collect relevant medical history, assessment findings, treatment notes and other information necessary to provide safe and appropriate care.

Health information is treated as sensitive personal data and receives additional protection.

We use your personal information to:

• Respond to enquiries about our services and promotional offers.
• Contact you by telephone or email to arrange appointments you have requested.
• Manage bookings, cancellations and appointment reminders.
• Provide physiotherapy assessments, treatment and rehabilitation.
• Maintain accurate clinical records.
• Meet our professional, regulatory and legal obligations.

Submitting an enquiry does not automatically subscribe you to future marketing communications.

We will only send unrelated promotional emails or text messages where permitted by applicable marketing and data protection laws.

When you submit an enquiry through one of our Facebook or Instagram advertisements, your details are initially collected through Meta's Instant Forms service.

These details may then be transferred to a Google Sheets enquiry tracker, accessed by authorised members of the STRIDE team.

This information is used to contact you regarding your enquiry and arrange an appointment.

If you proceed with a booking, relevant personal information is entered into PracticeHub, our patient booking and practice management system.

Clinical information, including assessments and treatment records, is managed through our clinical record-keeping processes rather than the advertising enquiry spreadsheet.

We take appropriate steps to protect personal information against unauthorised access, misuse, loss or disclosure.

Under UK GDPR, we process your personal information where necessary to:

• Respond to your enquiries and take steps towards providing services you have requested.
• Fulfil our contractual obligations when providing physiotherapy services.
• Pursue legitimate interests in managing enquiries and operating our clinic, where these do not override your rights.
• Comply with applicable legal and professional obligations.

Where we process health information to provide clinical assessment or treatment, we rely on the applicable health and social care provisions under Article 9(2)(h) of UK GDPR, together with an appropriate Article 6 lawful basis.

We do not sell your personal information.

We may share information with trusted service providers where necessary to manage enquiries, bookings and clinical services.

These include:

• Meta Platforms: For enquiries submitted through Facebook and Instagram advertising.
• Google: For managing initial enquiry information through Google Sheets.
• PracticeHub: For managing patient appointments and clinical records.

We may also share relevant information with healthcare professionals involved in your care, where appropriate and lawful, or with authorities where legally required.

Where service providers process personal information outside the UK, we ensure that applicable international data transfer requirements and safeguards are addressed.

We only retain personal information for as long as necessary for the purposes for which it was collected.

For enquiries that do not result in an appointment, our intended retention period is up to 90 days after our last contact, unless there is a legitimate or legal reason to retain the information for longer.

Where you become a patient, clinical records are retained in accordance with applicable professional guidance and record-keeping requirements. Adult clinical records are generally retained for at least eight years following the last treatment, with different periods applying to certain records and younger patients.

Information that is no longer required will be securely deleted or anonymised, subject to applicable retention obligations.

Under UK data protection law, you may have the right to:

• Request access to the personal information we hold about you.
• Ask us to correct inaccurate information.
• Request the deletion of personal information, where applicable.
• Object to certain uses of your information.
• Request restrictions on how your information is processed.
• Request the transfer of certain personal information.
• Withdraw consent where consent is the legal basis for processing.

These rights are subject to applicable legal exceptions, including requirements to retain certain clinical records.

To exercise your rights, please contact admin@stridehealth.org.uk.

You may also raise concerns with the Information Commissioner's Office (ICO) at www.ico.org.uk.

We may update this Privacy Policy to reflect changes in our services, systems or legal obligations.

The most recent version will be available on our website.

If you have any questions about how we handle your information, please contact us at:

admin@stridehealth.org.uk