top of page

Privacy Policy

Welcome to the Privacy Policy for Thrive Physio. We are committed to protecting your personal data and respecting your privacy. As a healthcare provider, we handle "Special Category Data" (health information), and we take our responsibility to secure this information very seriously.

​

This policy explains how we collect, use, and protect your data when you use our website, contact us via email or web contact form, or attend our clinic for treatment.

​

1) Who is Thrive Physio and how to contact the clinic 

Thrive Physio is the "Data Controller" for your information. If you have any questions about this policy or how your data is handled, please contact:

​

2) The data collected about you 

To provide safe and effective physiotherapy care, Thrive Physio must collect and hold specific information about you. This includes:

  • Identity & Contact Data: Name, address, date of birth, phone number, and email address.

  • Clinical Records: Notes regarding your assessments, symptoms, treatment plans, and progress.

  • Medical History: Details of disabilities, allergies, health conditions, or past surgeries (Special Category Data).

  • Third-Party Information: Reports from GPs, consultants, or results of scans (e.g., MRI/X-ray).

  • Financial Data: Details of payments made for services (note: we do not store full credit/debit card details).

​

3) How your data is collected 

We gather information through several channels:

  • Directly from you: Via our new patient assessment forms, email enquiries, or during your consultations.

  • Referrals: Information sent by your GP, consultant, or a Case Manager.

  • Website: Enquiries sent through our contact forms.

​

4) How Thrive Physio uses your personal data 

Thrive Physio uses your data for the following essential purposes:

  • Clinical Care: To ensure your treatment is safe, effective, and tailored to your needs.

  • Communication: To manage your appointments and respond to your enquiries.

  • Collaboration: To work with other health professionals involved in your care (with your consent).

  • Legal Compliance: To meet the professional record-keeping standards set by the Chartered Society of Physiotherapy (CSP).

  • Administration: For billing, processing payments, and managing potential claims for those under Case Management.

​

5) Where is your data stored? 

Thrive Physio uses secure digital systems to manage patient records.

  • Security: Electronic data is password-protected and stored on secure servers.

  • Website Hosting: Our website is hosted on Wix.com which provides a secure platform via firewalls to manage our online presence.

  • Third Parties: We never sell, swap, or rent your data to third parties for marketing purposes.

​

6) Data retention

In accordance with the NHS Records Management Code of Practice and CSP guidelines, Thrive Physio retains adult patient records for a minimum of 8 years following the conclusion of treatment. After this period, data is securely deleted or destroyed.

​

7) Recipients of personal data 

To provide the best care, Thrive Physio may share information with:

  • Healthcare Professionals: GPs or consultants (only with your explicit consent).

  • Case Managers/Solicitors: If you are being seen as part of a Medico-Legal claim or Road traffic accident for example, Thrive Physio will share reports and data as agreed in your specific case terms.

  • Insurance Companies: Whilst Thrive Physio does not accept direct payment from insurers, we may provide you with receipts or basic treatment summaries to assist your reimbursement claims.

​

8) Your legal rights 

Under GDPR, you have the following rights:

  • Right of Access: You can request a copy of the personal data we hold about you at any time. This will be provided via a secure email.

  • Right to Rectification: You may ask us to correct any inaccurate or incomplete information.

  • Right to Withdraw Consent: You can withdraw consent for data processing at any time. However, please note that we are legally required to retain clinical records for 8 years for insurance and professional regulatory purposes, even if you stop treatment.

​

9) Third-Party links and cookies 

Our website may include links to third-party websites or use cookies (via Google Analytics) to improve user experience. Disabling cookies in your browser may affect website functionality. We are not responsible for the privacy practices of external sites.

​

10) Your right to complain 

Thrive Physio strives for the highest standards in data privacy. If you have a concern, please contact the clinic directly at info.thrive.physio@gmail.com.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

​

​

Last Updated: 01/04/2026 

bottom of page