Privacy Policy (UK GDPR)

Janet Cappin Physiotherapy is committed to protecting your personal data and respecting your privacy in accordance with UK GDPR and the Data Protection Act 2018. 

1. Data Controller 

The Data Controller is: 

Janet Cappin 
Janet Cappin Physiotherapy Email: janetcappin1@outlook.com 
Registered with the Health and Care Professions Council 
HCPC Registration Number: PH47606 

2. Information Collected 

The following information may be collected: 

  • Full name 
  • Address 
  • Date of birth 
  • Contact details 
  • GP details 
  • Relevant medical history 
  • Clinical assessment and treatment notes 

This information is necessary to provide safe and effective physiotherapy care. 

3. Lawful Basis for Processing Your data is processed under: 

  • Provision of healthcare services 
  • Legitimate interests (accurate clinical record keeping) 
  • Legal obligations 
  • Explicit consent (where required) 
  • Health information is special category data and is processed only where necessary for healthcare provision. 

4. How Your Information Is Used 

Your information is used to: 

  • Provide assessment and treatment 
  • Maintain accurate clinical records 
  • Communicate regarding appointments 
  • Comply with professional and legal obligations  

Your information will not be used for marketing without your explicit consent.

5. Data Sharing 

Your information will not be shared without your consent except: 

  • Where required by law 
  • Where there is a safeguarding concern 

Any third-party service providers used are GDPR-compliant. 

6. Data Storage & Security Records are stored securely: 

  • Electronic records in password-protected systems 

Appropriate measures are in place to prevent unauthorised access, loss, or misuse. 

7. Data Retention 

Clinical records are retained in accordance with UK professional guidelines: 

  • Adults: 8 years after last treatment 

Records are securely destroyed after this period. 

8. Your Rights Under UK GDPR, you have the right to: 

  • Request access to your personal data 
  • Request correction of inaccurate data 
  • Request erasure (where legally permissible) 
  • Restrict or object to processing 
  • Lodge a complaint If you have concerns about how your data is handled. You may contact: The Information Commissioner’s Office Website: www.ico.org.uk 

9. Complaints Procedure 

I am committed to providing a high standard of care. If you are dissatisfied with any aspect of your treatment, please raise this with me directly: 

Email: janetcappin1@outlook.com 

I aim to: 

  • Acknowledge receipt within 5 working days 
  • Provide a written response within 20 working days 

If you remain dissatisfied, you may contact the Health and Care Professions Council The HCPC website address is http://www.hcpc-uk.org.uk