Legal
Privacy Policy
How we collect, use, store, and protect your personal information.
Introduction
RVIVE Physio ("we", "our", "us") is committed to protecting your privacy and ensuring your personal information is handled securely and lawfully. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website, contact us, or receive physiotherapy services. RVIVE Physio is the Data Controller responsible for your personal data under the UK GDPR and the Data Protection Act 2018.
The Data We Collect
We may collect and process the following categories of personal data:
Personal Information
- Name
- Email address
- Phone number
- Address
- Date of birth
Health & Clinical Information (Special Category Data)
- Injury details
- Medical history
- GP or consultant referral information
- Treatment notes, assessments, and progress records
- Images or videos used for clinical assessment (if applicable)
Booking, Payment & Administrative Information
- Appointment details
- Insurance information (if applicable)
- Payment records
Website & Technical Data
- IP address
- Browser type
- Pages visited
- Cookies and analytics data
Lawful Bases for Processing
We process your personal data under the following lawful bases:
Contract (Article 6(1)(b))
- Booking and managing appointments
- Providing physiotherapy, rehabilitation, and wellness services
- Communicating with you about your care
Special Category Condition (Article 9(2)(h))
- Providing healthcare and treatment under the responsibility of a registered physiotherapist
- Supported by Article 6(1)(b) (contract) and Article 6(1)(c) (legal obligation)
Legitimate Interests (Article 6(1)(f))
- Improving our services
- Managing clinic operations
- Ensuring website security
Consent (Article 6(1)(a))
- Marketing communications (you may withdraw consent at any time)
Legal Obligation (Article 6(1)(c))
- Compliance with UK law, insurance requirements, HCPC standards, or regulatory requests
How We Store & Protect Your Data
We use appropriate technical and organisational measures to keep your data secure, including:
- Encrypted practice management software
- Secure email and device protection
- Access controls for authorised staff
- Regular data protection reviews
Where Your Data Is Stored
Your data is stored within the UK or EEA. If any data is processed outside the UK/EEA, we ensure appropriate safeguards such as Standard Contractual Clauses.
Sharing Your Data
We only share your data when necessary and with trusted parties:
- Your physiotherapist, to provide treatment
- Insurance companies (if applicable)
- Service providers such as booking systems, payment processors, and IT support
- Regulatory bodies when legally required
All third-party processors operate under GDPR-compliant agreements. We do not sell your personal data.
Cookies & Website Tracking
Our website uses cookies and analytics tools to improve user experience and website performance. Non-essential cookies are only activated with your consent, in accordance with the Privacy and Electronic Communications Regulations (PECR). You can manage cookie preferences through your browser or our cookie banner.
Data Retention
Clinical records are retained in line with professional and legal requirements (HCPC, CSP, UK GDPR).
Your Rights
Under UK GDPR, you have the right to:
- Access your data
- Correct inaccurate data
- Request deletion (where applicable)
- Restrict or object to processing
- Request data portability
- Withdraw consent for marketing
To exercise your rights, contact us using the details below.
Contact Details
Updates to This Policy
We may update this Privacy Policy periodically. The latest version will always be available on our website.