Privacy Policy

Effective Date: 15/01/2025

At MAK Physiotherapy Ltd, your privacy is of utmost importance to us. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018. By using our services or website, you agree to the terms outlined in this policy.

Who We Are

MAK Physiotherapy Ltd (company number: 16072167) is the data controller responsible for your personal information. References to "we," "us," or "our" in this policy refer to MAK Physiotherapy Ltd.

Contact Details

Data Protection Officer (DPO): Masood Ahmad

Email: contact@makphysio.co.uk

Address: 2A Anerley Hill, Crystal Palace, London, SE19 2AAIf you have any questions about this policy or wish to exercise your data protection rights, please contact our DPO using the details above.

What Data Do We Collect?

We may collect, use, store, and process the following types of personal data:

Personal Information Identity Data: Name, title, date of birth, gender.

Contact Data: Address, email address, phone numbers.

Medical Data: Health information necessary for providing physiotherapy treatments.

Transaction Data: Records of payments and services provided.

Technical Data: IP address, browser type, and information collected through cookies on our website.

Marketing Preferences: Your preferences for receiving marketing communications.

Special Category Data

As part of providing physiotherapy services, MAK Physiotherapy Ltd processes special category data. This refers to sensitive personal information, such as your health-related data, which requires additional protection under the UK GDPR.

What Special Category Data We Collect

We may collect and process:Medical history and health conditions.Details of injuries or surgeries.Treatment records and progress notes.Any other health information necessary for your care.

How We Use Special Category Data

We process this data to:Assess, diagnose, and treat medical conditions.

Develop and provide personalized treatment plans.

Monitor your progress and adapt care accordingly.

Ensure continuity of care by communicating with other healthcare professionals, such as GPs or consultants, with your consent.

Legal Basis for Processing Special Category Data

We process your special category data under the following legal bases:

Provision of Healthcare: Processing is necessary for medical diagnosis, treatment, and the provision of healthcare services.

Explicit Consent: We may request your explicit consent to process this data where required.

Legal Obligations: To comply with laws or regulations, such as maintaining medical records.

Your Rights Regarding Special Category Data

You have the right to:

Withdraw consent for processing special category data, where applicable.

Request access to your medical records.

Request corrections to any inaccuracies in your health data.

How We Collect Your Data

We collect personal data through:

Direct Interactions: Forms completed at our clinic, during appointments, or online.

Automated Technologies: Cookies and similar tracking technologies on our website.

Third Parties: Referrals from healthcare providers, such as GPs or consultants.

How We Use Your Data

We will only use your personal data when legally permitted. Common uses include:Providing Healthcare Services: To assess, diagnose, and treat medical conditions.

Billing and Payment: To process payments and maintain financial records.

Communication: To send appointment reminders, respond to inquiries, or share relevant updates.

Marketing: To inform you about services, promotions, and health-related content (with your consent).

Legal Compliance: To fulfill regulatory or legal obligations.

Lawful Basis for Processing

We process your personal data based on the following grounds:

Consent: When you provide explicit consent, such as for marketing.

Contract: To fulfill our agreement for providing physiotherapy services.

Legitimate Interests: To manage our business effectively while respecting your rights.

Legal Obligation: To comply with UK law, such as record-keeping requirements.

Healthcare Provision: For processing special category data to deliver treatment.

Data Sharing

We may share your data with:

Healthcare professionals involved in your treatment, such as GPs or consultants.

Third-party service providers who assist in delivering our services (e.g., website support, payment processors).

Regulatory authorities if legally required.

We ensure that all third parties respect the security of your data and process it lawfully.

Data Security

We implement robust security measures to protect your personal data, including:

Encryption of sensitive information and secure files

Secure storage systems.

Limiting access to authorized personnel only.

In the event of a data breach, we will notify you and the ICO if required by law.

Data Retention

We will only retain your personal data for as long as necessary to:

Provide you with our services.

Comply with legal, accounting, or reporting requirements.

Typically, patient records are retained for six years after the end of treatment, or longer if required by law.

Your Data Protection Rights

Under UK GDPR, you have the right to:

Access: Request a copy of your personal data.

Correction: Have inaccurate or incomplete data corrected.

Erasure: Request deletion of your data where applicable.

Restriction: Limit how we process your data in certain circumstances.

Data Portability: Request a transfer of your data to another provider.

Objection: Object to processing for direct marketing or legitimate interests.If you wish to exercise any of these rights, contact our DPO at contact@makphysio.co.uk

Marketing Preferences

You can opt-out of receiving marketing communications at any time by:

Following the unsubscribe link in emails.

Contacting us directly at contact@makphysio.co.uk.

Our website uses cookies to improve your browsing experience. You can control your cookie preferences through your browser settings.

Google Analytics Privacy Policy

We use Google Analytics to collect and analyze information about the use of our website. Google Analytics collects information such as your IP address, browser type, the pages you visit on our site, the time and date of your visit, and the links you click on. This information helps us improve the functionality and user experience of our website. Google Analytics may also use cookies to track your interactions with our site. You can disable cookies or opt out of Google Analytics by installing the Google Analytics opt-out browser add-on. For more information, please review Google’s Privacy Policy at https://www.google.com/policies/privacy/.

Payment Processing Data

MAK Physiotherapy Ltd does not directly access or store your credit or debit card details. Payments for our services are processed securely through trusted third-party vendors, each with their own privacy and security policies. By making a payment, you agree to the terms and conditions of these vendors.

Our payment processors include:

Wix Payments: Wix Payments Terms

Stripe: Stripe Legal

Google Wallet: Google Wallet Terms

Apple Pay: Apple Pay Terms

Barclays: Barclays Privacy Policy

We recommend reviewing these policies to understand how your payment data is managed. Rest assured, we only work with payment providers that comply with the highest standards of data protection and security.

Complaints

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk. but we would encourage you to first try and resolve this with us by emailing contact@makphysio.co.uk

Policy Updates

Any changes will be posted on this page, and where appropriate, notified to you via email.