Privacy Policy

Privacy Policy for Duncan Sangster Physiotherapy

Introduction

At Duncan Sangster Physiotherapy, we are committed to protecting your privacy and handling your personal data with care and transparency. This policy outlines how we collect, use, and safeguard your information when you interact with our clinic and website.

What Information We Collect

We may collect and process the following types of personal data:

• Contact details: name, date of birth, email address, phone number

• Appointment information: booking dates, treatment notes

• Health-related information: relevant medical history shared during consultations

How We Use Your Information

We use your data to:

• Schedule and manage appointments

• Provide physiotherapy services tailored to your needs

• Respond to enquiries and follow up on treatment

• Comply with legal and regulatory obligations

We do not sell or share your personal data with third parties for marketing purposes.

Legal Basis for Processing

We process your data under the following lawful bases:

• Consent: when you voluntarily provide information (e.g., contact form)

• Contract: to deliver physiotherapy services you’ve requested

• Legal obligation: for record-keeping and regulatory compliance

• Legitimate interest: to improve our services and respond to enquiries

Data Security

We take appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access. This includes secure storage, limited access, and regular reviews of our data handling practices.

Your Rights

You have the right to:

• Access the personal data we hold about you

• Request correction or deletion of your data

• Withdraw consent at any time (where applicable)

• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us