Privacy Policy
Centre of Gravity Physiotherapy is committed to protecting your privacy and ensuring that your personal data is handled lawfully, fairly and transparently. This Privacy Policy explains how we collect, use, store and protect your personal information when you use our website or our services.
Who We Are
Centre of Gravity Physiotherapy provides physiotherapy assessment and treatment services. We are the data controller for the personal information we collect and process.
If you have any questions about this Privacy Policy or how your data is used, you can contact us at:
Email: harry@coggroup.co.uk
The Information We Collect
We may collect and process the following types of personal data:
Personal contact information
This may include:
Name
Email address
Telephone number
This information is typically collected when you:
Contact us via the website
Book a consultation or appointment
Communicate with us by phone or email
Health and clinical information
Where you proceed with physiotherapy services, we may collect relevant health information, including:
Information about your symptoms, injury or condition
Medical history relevant to your treatment
Assessment findings and treatment notes
Exercise and rehabilitation data
This information is collected to ensure safe, appropriate and effective physiotherapy care.
Website and technical information
When you visit our website, we may automatically collect limited technical information such as:
IP address
Browser type
Device type
Pages visited
This information helps us understand how the website is used and improve its performance.
How We Use Your Information
We use your personal data for the following purposes:
To respond to enquiries and requests for information
To arrange and manage consultations and appointments
To provide physiotherapy assessment and treatment
To prescribe, deliver and monitor rehabilitation exercises
To communicate with you regarding your care
To maintain accurate clinical and administrative records
To comply with legal, regulatory and professional obligations
We do not use your personal data for marketing purposes without your consent, and we do not sell your data to third parties.
Legal Basis for Processing Data
Under UK data protection law (UK GDPR), we rely on the following lawful bases to process personal data:
Consent – where you have provided consent to be contacted or to receive services
Contract – where processing is necessary to provide physiotherapy services
Legal obligation – where we are required to retain records by law or professional standards
Legitimate interests – where processing is necessary to operate our clinic and communicate appropriately with patients
Health and clinical data is processed as special category data, where processing is necessary for healthcare purposes and carried out by a regulated healthcare professional.
Clinical Systems and Third-Party Services
To support the safe and efficient delivery of physiotherapy services, we use secure, GDPR-compliant third-party systems.
Cliniko
Cliniko is used as our clinical practice management system. It is used to store:
Appointment details
Clinical notes
Treatment records
Patient contact information
Cliniko stores data securely and complies with UK and international data protection standards.
Physitrack
Physitrack is used to deliver personalised exercise programmes and rehabilitation resources where appropriate. This may involve processing:
Your name or identifier
Prescribed exercises
Exercise progress and feedback
Physitrack processes data in accordance with its own privacy and security policies.
Calendly
Calendly is used to manage bookings for free consultation phone calls made through the website. When you use Calendly, your name and contact details are processed in line with Calendly’s privacy policy.
We only use third-party providers that demonstrate appropriate data protection and security standards.
Data Storage and Security
All clinical information is handled in accordance with professional standards of confidentiality and data protection expected of HCPC-registered physiotherapists.
We take appropriate technical and organisational measures to protect your personal data against:
Unauthorised access
Accidental loss
Disclosure or misuse
Access to clinical systems is restricted to authorised users only. Electronic records are stored securely, and reasonable steps are taken to ensure data integrity and confidentiality.
How Long We Keep Your Information
We retain personal data only for as long as necessary to fulfil its purpose.
Clinical records are retained in line with legal and professional requirements
Administrative and contact information is retained only for as long as required for communication and service delivery
When data is no longer required, it is securely deleted or anonymised.
Sharing Your Information
We do not share your personal data with third parties except where:
It is necessary to provide physiotherapy services
You have given consent
We are legally required to do so
We do not share personal data for marketing purposes.
Your Rights
Under UK data protection law, you have the right to:
Request access to your personal data
Request correction of inaccurate or incomplete data
Request deletion of your data where appropriate
Object to or restrict certain types of processing
To exercise any of these rights, please contact us using the details above.
Cookies
Our website may use cookies and similar technologies to improve functionality and understand how the site is used. Cookie management and consent are handled through Squarespace’s built-in tools.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or our services. The most recent version will always be available on this website.
Contact details
Centre of Gravity Physiotherapy
Call: 01252 268798
Email: harry@coggroup.co.uk