PRIVACY NOTICE
 

Last updated: 11 October 2026

This notice explains how Louis Hughes Physiotherapy collects, uses, stores and shares your personal information, and what your rights are.
 
Who I am
 

Louis Hughes Physiotherapy is the data controller for your personal information. Contact: Louis Hughes, info@louishughesphysio.com, +44 7765 333108.
 
What information I collect
 

• Contact and booking details: name, date of birth, address, phone number, email, parking and access information, and appointment details.
• Health information: your reason for seeking care, medical history, medications, assessment findings, treatment notes and exercise programmes.
• Payment records: records of payments made. Card details are handled by the payment provider and are not stored by me.
• Emergency contact and GP details, if you choose to give them.
• Website data: cookies, as described under Cookies and website data below.

​
Why I use your information
 

• To book and manage your appointments and take payment (contact).
• To provide healthcare and keep clinical records, including writing to your GP where you agree (health and social care provision).
• To meet legal and professional duties, such as HCPC, insurance and tax requirements (legal obligation).
• To protect you or someone else from serious harm (legal obligation or vital interests).
• To send you updates about my services, only if you opt in (consent). You can withdraw this at any time.

​

Your consent to treatment is separate from the legal basis for using your data.
 
Who I share your information with

• Your GP or other healthcare professionals, where you agree or where required for your safety.
• Services that help me run my practice: Wix (website and bookings), Microsoft OneDrive (secure record storage), my email provider, and payment providers.
• My insurer or professional and regulatory bodies, if there is a claim, complaint or investigation.
• Authorities, where required by law or to protect someone from serious harm.

​

I do not sell your information. Some of these providers may process information outside the UK, using appropriate safeguards.
 

How long I keep your information

Clinical records are kept in line with Chartered Society of Physiotherapy guidance: generally 8 years from your last treatment for adults, and longer for children. Financial records are kept as required by tax law. After this, records are securely deleted. Marketing details are kept until you unsubscribe.
 
How I keep your information secure
 

Clinical records are kept in encrypted, access-controlled storage that only I can open. I use a business email address, protect accounts with strong passwords and two-factor authentication, and limit what health information is sent by email. If a serious data breach affects you, I will tell you and the ICO as the law requires.
 
Your rights
 

You have the right to be informed, to access a copy of your information, to have inaccurate information corrected, to ask for erasure in some circumstances (clinical records may need to be kept for legal and professional reasons), to restrict or object to certain use, and to withdraw consent for marketing at any time. To use these rights, email info@louishughesphysio.com. I will normally reply within one month.
 

Complaints
 

Please contact me first. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113.

Cookies and website data
 

My website uses cookies to work properly and, with your consent, for analytics or marketing. You can manage your choices through the cookie banner on the site.
 

Changes to this notice

I may update this notice from time to time. The latest version is always on this website.