Privacy Policy

1. Who We Are

Briganti Physiotherapy Ltd
Unit 3/4 Dollywaggon Way, Bamber Bridge, Preston, Lancashire, PR5 6BL
Email: info@BrigantiPhysiotherapy.co.uk
Telephone: 01772 282189

2. Information We Collect

We may collect and process the following categories of personal data:

• Identity data — name, date of birth, gender
• Contact data — email address, telephone number, postal address
• Health data — medical history, symptoms, diagnoses, treatment records (special category data)
• Financial data — payment card details (processed securely via our payment provider; we do not store card numbers)
• Technical data — IP address, browser type, device information, pages visited, and cookies
• Communications data — enquiries submitted via our contact form, emails and telephone records

3. How We Collect Your Information

• Directly from you — when you book an appointment, complete our contact form, telephone us, or attend a consultation
• Automatically — via cookies and similar technologies when you browse our website
• From third parties — with your consent, from referring GPs, consultants or other healthcare providers

4. How We Use Your Information

We use your personal data for the following purposes:

• Providing physiotherapy, diagnostic and rehabilitation services to you
• Managing your appointments and clinical records
• Processing payments for services rendered
• Responding to enquiries submitted via our website or by telephone
• Sending appointment reminders and follow-up communications
• Complying with our legal and regulatory obligations as a healthcare provider
• Improving our website and services through anonymised analytics

5. Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

• Contract — processing is necessary to provide the services you have requested
• Legal obligation — we are required to retain clinical records under healthcare regulations
• Vital interests — in emergency situations where processing is necessary to protect life
• Legitimate interests — for website analytics and improving our services, where your interests do not override ours
• Explicit consent — for special category health data where no other basis applies

6. Health Data

Health data is special category personal data under UK GDPR. We process it on the basis of providing direct healthcare to you (Article 9(2)(h)) and, where required, with your explicit consent. All clinical records are stored securely and accessible only to authorised clinical staff involved in your care.

7. Sharing Your Information

We do not sell your personal data. We may share it with:

• Other healthcare professionals involved in your care (e.g. referring GPs, consultants) — with your knowledge
• Payment processors — solely to process transactions securely
• IT service providers — who host or maintain our systems under strict data processing agreements
• Regulatory bodies — where we are legally required to disclose information (e.g. HCPC, ICO)

8. Data Retention

We retain clinical records for a minimum of eight years from the date of last treatment (or until age 25 for records relating to children), in line with NHS and professional body guidance. Contact and enquiry data is retained for up to two years. Financial records are kept for six years to comply with HMRC requirements.

After the applicable retention period, data is securely deleted or anonymised.

9. Cookies

Our website uses cookies to distinguish you from other users and to improve your browsing experience. We use strictly necessary cookies (required for the site to function), analytics cookies (to understand how visitors use the site), and preference cookies (to remember your settings). You can manage your cookie preferences at any time via the cookie banner on our website.

10. Your Rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where there is no lawful reason to retain it
• Restriction — ask us to restrict processing in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@BrigantiPhysiotherapy.co.uk. We will respond within one calendar month.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with a revised “last updated” date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us: