Privacy Policy

Privacy Policy

Last updated: 29/04/2026

1. Introduction

Welcome to Halperin Physiotherapy ("we", "us", or "our"). We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at halperinphysiotherapy.co.uk or use our physiotherapy services. It covers data collected from patients, website visitors, and staff or contractors working with us.

If you have any questions, please contact us using the details in Section 11.

2. Who We Are

Halperin Physiotherapy is the data controller responsible for your personal data.

Registered business name: Michael Halperin trading as Halperin Physiotherapy. Email: halperinphysiotherapy@hotmail.com

3. What Personal Data We Collect and How

We collect personal data in the following ways and categories:

From you directly— by telephone, email, website contact form, or at your appointment:

• Name, date of birth, address, email, and telephone number
• Emergency contact details
• Medical history, symptoms, diagnoses, and treatment      information
• Medications, allergies, and GP details
• Health insurance policy details and insurer name
• Payment and billing information (we do not store full card      details)
• Information submitted through our website contact form

From third parties— such as your GP, hospital, health insurer, or referring healthcare professional:

• Referral letters and clinical correspondence
• Insurance authorisations and claim-related information

From staff and contractors during recruitment and onboarding:

• Name, address, contact details, and right to work      documentation
• Bank details, payroll information, and employment or      contractor agreements
• Professional registrations, qualifications, sickness and      absence records

Automatically when you visit our website:

• IP address, browser type, pages visited, and cookie data (see      Section 9)

4. How and Why We Use Your Personal Data

Patient data:We use your information to assess and treat your condition, maintain clinical records, communicate with other healthcare professionals involved in your care, and comply with our professional obligations as registered physiotherapists. Where your treatment is funded by a health insurer, we may share relevant clinical information with them to process authorisations or claims — we will always obtain your explicit written consent before doing so. You may withdraw this consent at any time, though this may affect our ability to process claims on your behalf.

The legal basis for processing special category health data is Article 9(2)(h) UK GDPR — processing necessary for the provision of health or social care and treatment.

Contact and administrative data:We use your contact and financial information to respond to enquiries, manage appointments, issue invoices, process payments, and comply with legal obligations. The legal bases are performance of a contract, legal obligation, and legitimate interests.

Staff and contractor data: We process this to fulfil our obligations as an employer or contracting party, administer payroll and HR records, verify right to work and professional registrations, and comply with employment law and HMRC obligations. The legal bases are performance of a contract, legal obligation, and legitimate interests.

Marketing With your consent, we may send you relevant health information or updates about our services. You can withdraw consent at any time by contacting us at halperinphysiotherapy@hotmail.com or clicking "unsubscribe" in any email.

5. Sharing Your Personal Data

We do not sell your personal data. We may share it with:

• Healthcare      professionals involved in your care, on a      need-to-know basis
• Health      insurers and third-party payers,      where your treatment is covered by insurance and you have given explicit      consent
• Employed      staff and self-employed associates     involved in delivering your care or administering your records
• IT,      software, and payment providers who      support our systems, acting as data processors under contract
• HMRC      and payroll providers as required      for tax and employment purposes
• Regulatory      and legal authorities where      required by law, including the HCPC, CSP, or law enforcement

6. How Long We Keep Your Data

• Adult      patient records: Minimum 8 years from last      treatment, in line with NHS Records Management guidance and CSP/HCPC      professional standards
• Children's      records: Until the patient's 25th      birthday (or 26th if aged 17 at end of treatment)
• Financial      and insurance records: 6 years, in      line with HMRC requirements
• Website      contact form enquiries: 2 years      from date of enquiry
• Employee      records: 6 years from end of employment
• Contractor      records: 6 years from end of contract

After the relevant period, data is securely deleted or anonymised.

7. How We Protect Your Data

We use appropriate technical and organisational measures to protect your data, including secure password-protected systems, encrypted communications where possible, restricted access on a need-to-know basis, confidentiality agreements with all staff and associates, and secure storage for paper records. In the event of a data breach likely to affect your rights, we will notify the ICO within 72 hours and contact you directly where required.

8. Your Rights

Under UK GDPR you have the right to: access your data; have inaccurate data corrected; request erasure in certain circumstances; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time where processing is based on consent. We do not make solely automated decisions about you.

To exercise any of these rights, contact us at halperinphysiotherapy@hotmail.com .We will respond within one calendar month.

9. Cookies

Our website uses cookies to help it function and, where you consent, to understand how it is used. Strictly necessary cookies cannot be disabled. Analytics cookies are only placed with your consent and can be withdrawn at any time via your browser settings or our cookie controls 

Note:Please confirm with your web developer which analytics tools are active on your site and update this section before publishing.

10. Changes to This Policy

We may update this policy from time to time. The current version will always be on our website with the "Last updated" date reflecting any changes. We will notify you directly where changes are significant.

11. Contact Us and Complaints

For any questions about this policy or to exercise your rights, please contact us: Email: halperinphysiotherapy@hotmail.com 

You have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.ukor on 0303 123 1113 if you are unhappy with how we have handled your personal data. We would appreciate the opportunity to address your concerns first, so please contact us in the first instance. 

This Privacy Policy was last reviewed on [29/04/2026].