Privacy Policy

Who we are

Physio Athletic Ltd (“Physio Athletic”, “we”, “us”) is a physiotherapy, sports massage and personal training clinic, and the controller of the personal information described in this policy.

• Company registered in England and Wales, number 13856751, registered office 171 Barrier Point Road, London E16 2SE
• Clinic: Unit 2 Hoola, 5 Tidal Basin Road, Canning Town, London E16 1UX (inside Sculpt & Sweat Studio)
• Email: hello@physioathletic.co.uk · Phone: 020 8064 3420

For any question about your personal information, or to use your rights, email hello@physioathletic.co.uk.

The short version

• We only collect what we need to reply to you, book and treat you, take payments and run the website.
• We never sell your information.
• Our website statistics use no cookies and don’t store your IP address.
• Meta’s advertising tools only run if you accept them, never on our pages about specific injuries or conditions, and never see anything you type into a form.
• You can change your cookie choices at any time with “Cookie settings” at the bottom of every page.

What we collect and why

When you visit our website

Like every website, our server records technical details of each visit: your IP address, the date and time, the page requested and your browser. We use them to keep the website secure and to fix faults, and delete them after about two months. Legal basis: our legitimate interest in running a safe, working website.

We count visits with Umami, a privacy-friendly statistics tool that uses no cookies and does not store your IP address. It tells us which pages are read, which buttons are used to book, pay, call or email us (for example which bundle you chose to pay for), which website sent you, and your type of device, browser and country. It runs on servers managed by our web developer in the European Union. Legal basis: legitimate interest in understanding how the website is used.

Details of the cookies we use, and your choices, are in our Cookie Policy.

Advertising on Facebook and Instagram (only if you accept)

If you accept advertising cookies, our website uses the Meta Pixel, a tool from Meta Platforms Ireland Limited. It lets us see how many people our Facebook and Instagram ads bring to the website and show our ads again to people who have visited.

Meta then receives: the pages you visit, when you click to book, pay, call or email us, the name of a bundle you choose to buy (never the amount), plus the technical details your browser sends, such as your IP address, browser, device and Meta cookies. If you are logged in to Facebook or Instagram, Meta may link this to your account. We only see totals, never who you are.

The Pixel never runs on our pages about specific injuries or conditions, and it never receives anything you type into a form on our website.

Legal basis: your consent, which you can withdraw at any time with “Cookie settings”. We and Meta are joint controllers for collecting this information on our website and sending it to Meta; Meta is responsible for what it does with it afterwards, as explained in Meta’s Privacy Policy. You can ask Meta directly to use your rights over that information.

Maps

Our maps come from Google Maps and only load when you choose to show them. Google then receives your IP address and may set cookies, as explained in Google’s Privacy Policy. Legal basis: your consent.

When you contact us

If you call, email or message us, we use your name, contact details and what you tell us to reply and arrange your care. If you share details of an injury or your health, we treat them as health information and use them only to advise and treat you. Legal basis: taking steps at your request before an appointment, our legitimate interest in replying, and, for health information, the provision of health care.

When you book or become a patient

Online booking uses Zanda, our practice management system, which stores your details, appointments and clinical records for us. As health professionals we must keep accurate clinical records of your assessment and treatment. Legal basis: providing the care you asked for, our legal and professional duties, and, for health information, the provision of health care.

If you use private health insurance, we share the information your insurer needs to authorise and pay for your treatment.

When you pay online

Bundles are paid through Stripe. Your card details go straight to Stripe and we never see them; we receive your name, email address and what you bought. Legal basis: taking payment for what you bought. See Stripe’s Privacy Policy.

When you download a free guide

Our guide forms are provided by HubSpot. We use your name, email address and, if you give it, your phone number to send the guide you asked for. If you tick the box to receive other communications, we may also contact you about our services; you can unsubscribe at any time with the link in every email. HubSpot stores this information for us in its European data centre and protects the forms from spam with Google reCAPTCHA. Legal basis: your request for the guide and, for other communications, your consent.

When you apply for a job

The careers form sends us your name, contact details, message and CV by email. The file is not kept on the website. We use it only to consider your application. Legal basis: taking steps at your request before a possible contract.

Who we share it with

We only share what each provider needs to do its job for us, under a contract that protects your information:

• Dabryx, our web developer: website, hosting, email and visit statistics, on servers in the European Union
• Zanda: online booking and clinical records
• Stripe: online payments
• HubSpot: free guide forms
• Google: maps (if you choose to show them), spam protection on the guide forms and some website fonts
• Meta: advertising measurement, only if you accept
• Your health insurer, when you use private insurance
• Professional advisers, regulators or the police, only when the law requires it

Parts of the website’s code are delivered by public networks (unpkg and jsDelivr), which receive your IP address to send it to your browser.

Transfers outside the UK

Some of these providers, such as Meta, Google, Stripe and HubSpot, may process information in the United States or elsewhere. When they do, it is protected by UK adequacy regulations (including the UK–US data bridge) or by the UK’s approved contract terms for international transfers.

How long we keep it

• Clinical records: at least 8 years after your last treatment; for children, until their 25th birthday (26th if they were 17 when treatment ended), if that is longer, in line with guidance from the Chartered Society of Physiotherapy
• Payment and accounting records: 6 years, as UK tax law requires
• Emails and messages: as long as needed to deal with your enquiry, and no more than 2 years unless they become part of your clinical record
• Job applications: up to 6 months after we decide, unless you agree we can keep your details for future roles
• Server logs: about two months
• Cookie choices: 6 months, after which we ask again

Your rights

You have the right to:

• get a copy of the information we hold about you
• have it corrected if it is wrong
• have it deleted, unless we must keep it (for example clinical records)
• limit or object to how we use it
• receive it in a format you can pass to someone else
• withdraw your consent at any time, without affecting what we did before

Email hello@physioathletic.co.uk. It’s free, and we reply within one month. We may ask you to confirm your identity first.

Complaints

If you are unhappy with how we use your information, please tell us first at hello@physioathletic.co.uk and we’ll try to put it right. You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.

Changes to this policy

We update this policy when the way we use information changes. The date at the top shows the latest version.