GDPR / Data Protection Notice
I, Josie Marshall, as a sole practising physiotherapist specialising in pelvic health, am the Data Controller under the UK GDPR and the Data Protection Act 2018 for Align Pelvic Health Physiotherapy.
When you send me personal or health information (for example via email, online forms, or during consultations), I will collect, use, store and protect your data in line with legal requirements.
What personal data I collect
Contact details (name, address, phone number, email)
Health and treatment information relevant to your pelvic health condition
Any other information you choose to send or that is necessary for care (e.g. referrals, medical history)
Why I use it (lawful basis & purpose)
To provide you with safe and effective physiotherapy treatment.
To communicate with you about appointments, progress, and follow‐ups.
To keep accurate records as required for professional standards and safe practice.
Where required, to comply with legal or regulatory obligations.
Health data is a special category under GDPR; I process it only where necessary for health treatment or where there is explicit consent.
How long I keep your data
I will retain treatment records for as long as required by professional regulatory bodies (for example, a minimum of 11 years for adult health records in many physiotherapy settings, and longer in some cases).
I will delete or anonymise data when it is no longer needed, unless there is a legal requirement to retain it longer.
Security and confidentiality
I take appropriate technical and organisational measures to keep your information safe (secure storage, restricted access, confidentiality).
Only authorised persons (me, my professional colleagues, or others to whom I have a duty of care) will have access to your information, and only when needed for your care.
Your rights
You have rights under the UK GDPR, including:
The right to access your personal data (“right of access”)
The right to have inaccurate or incomplete data corrected (“right of rectification”)
The right to request erasure in certain circumstances (“right to be forgotten”)
The right to restrict or object to certain kinds of processing
The right to data portability, in limited circumstances
If you have any questions, concerns, or wish to exercise any of these rights, please contact me at alignpelvichealth@gmail.com.
If you are not satisfied with my response, you have the right to complain to the UK Information Commissioner’s Office (ICO).