Privacy Notice
Last updated: 14 August 2026
Physioimpulse Ltd (“Physioimpulse”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Notice explains how we collect, use, store and protect your personal information when you use our website, contact us, book an appointment or receive treatment from us.
1. Who we are
Physioimpulse Ltd is the organisation responsible for your personal information and is the data controller for the personal information we process in connection with our services.
Address: 3 Miles Buildings Bath BA1 2QS
Privacy contact: [email protected]
If you have any questions about how we use your information, or wish to exercise any of your data protection rights, please contact us using the email address above.
2. What information we collect
Depending on how you interact with us, we may collect:
● Your name and contact details, including telephone number and email address.
● Date of birth and other information needed to identify you.
● Appointment and booking information.
● Information about your health, symptoms, medical history, diagnosis, treatment and rehabilitation.
● Clinical assessment and treatment records.
● Information relating to referrals, insurance or other third-party arrangements where relevant.
● Payment and transaction information.
● Information you provide when contacting us through our website.
● Information about your use of our website, including information collected through cookies and similar technologies.
● Your marketing preferences.
We only collect information that is reasonably necessary for the purposes described in this Privacy Notice.
3. Health information
Some of the information we process is information concerning your physical or mental health. This is considered special category personal data under UK data protection law and is subject to additional protection.
We process health information where this is necessary to provide healthcare services, assess and treat you, maintain appropriate clinical records, manage your care and meet our professional and legal obligations.
We do not use your clinical information for unrelated marketing purposes.
4. How we use your information
We may use your personal information to:
● Provide physiotherapy, chiropractic, osteopathy, massage, rehabilitation and other services offered by Physioimpulse.
● Assess, diagnose and treat your condition.
● Maintain accurate clinical records.
● Arrange and manage appointments.
● Communicate with you about your appointments and treatment.
● Process payments and manage accounts.
● Respond to enquiries submitted through our website.
● Meet our legal, regulatory and professional obligations.
● Deal with complaints, legal claims and insurance matters where necessary.
● Maintain the security and operation of our website and IT systems.
● Analyse and improve our services and website.
● Send marketing communications where you have provided the appropriate consent.
5. Our lawful bases for processing
We process personal information under the lawful bases provided by UK data protection law.
Depending on the circumstances, these may include:
Performance of a contract – where processing is necessary to provide services that you have requested from us.
Legal obligation – where we are required to process or retain information to comply with a legal or regulatory requirement.
Legitimate interests – where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
Consent – where we have specifically asked for your consent, for example for certain marketing communications.
For health information and other special category data, we also rely on an applicable condition under UK data protection law, including where processing is necessary for the provision or management of healthcare services and where otherwise permitted by law.
6. Clinical records
We maintain clinical records because accurate records are necessary for safe and effective healthcare and to meet our professional, legal and regulatory responsibilities.
Clinical records are stored electronically using Cliniko.
We generally retain adult clinical records for eight years from the date of last treatment.
For children, records are generally retained for eight years after their 18th birthday or until the individual reaches 25, whichever is later, subject to any specific circumstances that require a different retention period.
We may retain information for longer where this is necessary because of legal, regulatory, insurance or other legitimate requirements.
7. Who we share information with
We treat your personal and clinical information as confidential.
We do not routinely disclose your clinical information to third parties.
Information may be shared where:
● You have specifically requested or authorised us to do so.
● It is necessary for your healthcare and you have provided appropriate permission.
● We are required to do so by law.
● It is necessary to protect someone’s vital interests in an emergency.
● It is necessary in connection with legal proceedings, insurance or another legitimate legal requirement.
Where we use external companies to provide services to us, they may process personal information on our behalf. These organisations are required to handle information appropriately and securely.
8. Cliniko
We use Cliniko to manage appointments and maintain electronic clinical records.
Cliniko acts as a data processor for healthcare practices using its system, while Physioimpulse remains responsible for determining how and why your personal information is processed.
9. Payment information
We use Zettle by PayPal to process certain payments.
Payment providers may process information necessary to complete and verify transactions. We do not retain your full card payment details in our clinical records.
10. Website and Google Ads
We use Google services, including Google Ads, to advertise our services and understand the effectiveness of our advertising.
Depending on how these services are configured on our website, Google may use cookies or similar technologies to collect information about website visits and interactions.
Where consent is legally required for non-essential cookies or tracking technologies, we will seek that consent before using them.
You can control certain cookie and advertising preferences through your browser and through Google’s available privacy controls.
11. Marketing
We may occasionally send information about Physioimpulse services, offers or other relevant communications by email.
Where consent is required, we will only send marketing communications where you have provided the appropriate consent.
You can withdraw your consent or opt out of marketing communications at any time.
Every marketing email will provide an appropriate way to unsubscribe.
Withdrawing marketing consent will not affect your ability to receive treatment from us.
12. Website enquiries
If you contact us through a website form, we may collect the information you provide, including your name, contact details and any information included in your message.
Please avoid including unnecessary sensitive medical information in a general website enquiry form. If you provide health information, we will process it securely and in accordance with this Privacy Notice.
13. Data security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, destruction, alteration or disclosure.
Access to clinical information is restricted to people who need it for legitimate professional or administrative purposes.
No method of electronic storage or transmission is completely secure, so we cannot guarantee absolute security.
14. Your rights
Under UK data protection law, you may have rights including:
● The right to be informed about how we process your information.
● The right to request access to the personal information we hold about you.
● The right to request correction of inaccurate or incomplete information.
● The right to request erasure in certain circumstances.
● The right to request restriction of processing in certain circumstances.
● The right to object to certain processing.
● The right to data portability in certain circumstances.
● The right to withdraw consent where processing is based on consent.
Some rights are subject to legal exceptions and may not apply in every situation.
If you wish to exercise a right, please contact:
[email protected]
We may need to verify your identity before providing information or making changes.
15. Subject Access Requests
You have the right to request a copy of the personal information we hold about you.
This is known as a Subject Access Request (SAR).
You can make a request by emailing:
[email protected]
There is generally no charge for making a Subject Access Request. We may charge a reasonable fee, or refuse a request, where permitted by data protection law, for example where a request is manifestly unfounded or excessive.
16. Complaints
If you have concerns about how we have handled your personal information, please contact us first at:
[email protected]
You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).
Information about making a complaint is available from the ICO’s website.
17. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to our services, technology, legal requirements or how we process personal information.
The latest version will always be made available on our website.
Last updated: 14 August 2026
Physioimpulse Ltd (“Physioimpulse”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Notice explains how we collect, use, store and protect your personal information when you use our website, contact us, book an appointment or receive treatment from us.
1. Who we are
Physioimpulse Ltd is the organisation responsible for your personal information and is the data controller for the personal information we process in connection with our services.
Address: 3 Miles Buildings Bath BA1 2QS
Privacy contact: [email protected]
If you have any questions about how we use your information, or wish to exercise any of your data protection rights, please contact us using the email address above.
2. What information we collect
Depending on how you interact with us, we may collect:
● Your name and contact details, including telephone number and email address.
● Date of birth and other information needed to identify you.
● Appointment and booking information.
● Information about your health, symptoms, medical history, diagnosis, treatment and rehabilitation.
● Clinical assessment and treatment records.
● Information relating to referrals, insurance or other third-party arrangements where relevant.
● Payment and transaction information.
● Information you provide when contacting us through our website.
● Information about your use of our website, including information collected through cookies and similar technologies.
● Your marketing preferences.
We only collect information that is reasonably necessary for the purposes described in this Privacy Notice.
3. Health information
Some of the information we process is information concerning your physical or mental health. This is considered special category personal data under UK data protection law and is subject to additional protection.
We process health information where this is necessary to provide healthcare services, assess and treat you, maintain appropriate clinical records, manage your care and meet our professional and legal obligations.
We do not use your clinical information for unrelated marketing purposes.
4. How we use your information
We may use your personal information to:
● Provide physiotherapy, chiropractic, osteopathy, massage, rehabilitation and other services offered by Physioimpulse.
● Assess, diagnose and treat your condition.
● Maintain accurate clinical records.
● Arrange and manage appointments.
● Communicate with you about your appointments and treatment.
● Process payments and manage accounts.
● Respond to enquiries submitted through our website.
● Meet our legal, regulatory and professional obligations.
● Deal with complaints, legal claims and insurance matters where necessary.
● Maintain the security and operation of our website and IT systems.
● Analyse and improve our services and website.
● Send marketing communications where you have provided the appropriate consent.
5. Our lawful bases for processing
We process personal information under the lawful bases provided by UK data protection law.
Depending on the circumstances, these may include:
Performance of a contract – where processing is necessary to provide services that you have requested from us.
Legal obligation – where we are required to process or retain information to comply with a legal or regulatory requirement.
Legitimate interests – where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
Consent – where we have specifically asked for your consent, for example for certain marketing communications.
For health information and other special category data, we also rely on an applicable condition under UK data protection law, including where processing is necessary for the provision or management of healthcare services and where otherwise permitted by law.
6. Clinical records
We maintain clinical records because accurate records are necessary for safe and effective healthcare and to meet our professional, legal and regulatory responsibilities.
Clinical records are stored electronically using Cliniko.
We generally retain adult clinical records for eight years from the date of last treatment.
For children, records are generally retained for eight years after their 18th birthday or until the individual reaches 25, whichever is later, subject to any specific circumstances that require a different retention period.
We may retain information for longer where this is necessary because of legal, regulatory, insurance or other legitimate requirements.
7. Who we share information with
We treat your personal and clinical information as confidential.
We do not routinely disclose your clinical information to third parties.
Information may be shared where:
● You have specifically requested or authorised us to do so.
● It is necessary for your healthcare and you have provided appropriate permission.
● We are required to do so by law.
● It is necessary to protect someone’s vital interests in an emergency.
● It is necessary in connection with legal proceedings, insurance or another legitimate legal requirement.
Where we use external companies to provide services to us, they may process personal information on our behalf. These organisations are required to handle information appropriately and securely.
8. Cliniko
We use Cliniko to manage appointments and maintain electronic clinical records.
Cliniko acts as a data processor for healthcare practices using its system, while Physioimpulse remains responsible for determining how and why your personal information is processed.
9. Payment information
We use Zettle by PayPal to process certain payments.
Payment providers may process information necessary to complete and verify transactions. We do not retain your full card payment details in our clinical records.
10. Website and Google Ads
We use Google services, including Google Ads, to advertise our services and understand the effectiveness of our advertising.
Depending on how these services are configured on our website, Google may use cookies or similar technologies to collect information about website visits and interactions.
Where consent is legally required for non-essential cookies or tracking technologies, we will seek that consent before using them.
You can control certain cookie and advertising preferences through your browser and through Google’s available privacy controls.
11. Marketing
We may occasionally send information about Physioimpulse services, offers or other relevant communications by email.
Where consent is required, we will only send marketing communications where you have provided the appropriate consent.
You can withdraw your consent or opt out of marketing communications at any time.
Every marketing email will provide an appropriate way to unsubscribe.
Withdrawing marketing consent will not affect your ability to receive treatment from us.
12. Website enquiries
If you contact us through a website form, we may collect the information you provide, including your name, contact details and any information included in your message.
Please avoid including unnecessary sensitive medical information in a general website enquiry form. If you provide health information, we will process it securely and in accordance with this Privacy Notice.
13. Data security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, destruction, alteration or disclosure.
Access to clinical information is restricted to people who need it for legitimate professional or administrative purposes.
No method of electronic storage or transmission is completely secure, so we cannot guarantee absolute security.
14. Your rights
Under UK data protection law, you may have rights including:
● The right to be informed about how we process your information.
● The right to request access to the personal information we hold about you.
● The right to request correction of inaccurate or incomplete information.
● The right to request erasure in certain circumstances.
● The right to request restriction of processing in certain circumstances.
● The right to object to certain processing.
● The right to data portability in certain circumstances.
● The right to withdraw consent where processing is based on consent.
Some rights are subject to legal exceptions and may not apply in every situation.
If you wish to exercise a right, please contact:
[email protected]
We may need to verify your identity before providing information or making changes.
15. Subject Access Requests
You have the right to request a copy of the personal information we hold about you.
This is known as a Subject Access Request (SAR).
You can make a request by emailing:
[email protected]
There is generally no charge for making a Subject Access Request. We may charge a reasonable fee, or refuse a request, where permitted by data protection law, for example where a request is manifestly unfounded or excessive.
16. Complaints
If you have concerns about how we have handled your personal information, please contact us first at:
[email protected]
You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).
Information about making a complaint is available from the ICO’s website.
17. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to our services, technology, legal requirements or how we process personal information.
The latest version will always be made available on our website.
