Who is responsible for your information
The Therapy Clinic is the controller of personal information collected through the clinic, this website, the booking system and the client portal. Privacy enquiries and rights requests can be made through the contact page.
The clinic does not publish its private treatment address online. Arrival information is shared directly with confirmed clients where required.
Information we collect
Name, email address, telephone number, address, postcode and other details you provide.
Services booked, appointment dates and times, attendance, changes, cancellations, discounts and booking history.
Consultation responses, treatment notes, relevant correspondence, aftercare information and records needed to manage ongoing care.
Amounts, deposits, refunds, payment status and transaction references. Full payment-card details are handled by Stripe rather than stored in the clinic database.
Security logs, session information and, where analytics consent is given, information about how visitors use the website.
Information supplied through contact forms, email or other communications with the clinic.
Health and treatment information
Some treatments require information about health, medical history, medication, surgery, symptoms or recovery. This can be special-category personal data under UK data-protection law.
The clinic only asks for this information where it is relevant to treatment suitability, safe care, consultation, treatment records, aftercare or another appropriate professional purpose. Detailed health information should be supplied through the secure consultation or client-record process rather than a general enquiry form wherever possible.
Why we use personal information
| Purpose | Examples | Typical legal basis |
|---|---|---|
| Provide clinic services | Bookings, consultations, treatment, aftercare and client support | Contract, steps before a contract, legal obligations and appropriate conditions for health information |
| Run the booking system | Availability, email/SMS reminders, changes, cancellations and client portal access | Contract and legitimate interests in operating the clinic |
| Process payments | Deposits, balances and refunds | Contract and legal/accounting obligations |
| Protect the service | Login security, fraud prevention, audit and technical logs | Legitimate interests and legal obligations where applicable |
| Measure website use | Google Analytics | Consent for non-essential cookies and related analytics processing |
| Optional marketing | News or promotional messages where offered | Consent or another lawful basis where permitted |
Transactional SMS is separate from marketing consent. Appointment texts are only sent where the client has opted in to that channel and can be turned off again. The exact lawful basis can depend on the circumstances. Where special-category health information is processed, an additional condition under UK data-protection law is required.
Services and processors we use
Website usage and performance measurement
Advanced consent mode allows limited cookieless measurement while analytics storage is denied; Analytics cookies are enabled only after consent.Search visibility, indexing and website performance reporting
Used by the clinic to understand how the website appears in Google Search.Transactional email delivery
Used for enquiries, booking confirmations, reminders and other service emails.Optional transactional appointment SMS
Used only where appointment SMS is enabled and the client has opted in to receive service messages by text.Online payment processing
Card details are handled by Stripe; the clinic stores transaction and payment-status information needed to manage bookings.The clinic may also use hosting, database, backup, security and professional-support services necessary to operate the website and clinic. Providers only receive information needed for their role and should be subject to appropriate contractual and security arrangements.
Some providers may process information outside the United Kingdom. Where required, appropriate international-transfer safeguards are used.
Google Search Console
Google Search Console is used to monitor indexing, search visibility and technical website performance. It is an administrative tool used by the clinic and does not by itself require an analytics cookie to be placed on your device simply because you visit this website.
How long we keep information
Information is kept only for as long as needed for the purpose it was collected and for any applicable legal, professional, insurance, accounting, safeguarding or record-keeping requirements.
Kept while the enquiry is being handled and for a reasonable follow-up period.
Kept for clinic administration, accounting, dispute handling and other applicable record-keeping requirements.
Kept according to the clinic's professional, insurance and legal record-retention requirements.
Kept for an appropriate period to protect the clinic, investigate misuse and maintain accountability.
Your data-protection rights
Depending on the circumstances, you may have rights to request access, correction, deletion, restriction, objection and data portability, and to withdraw consent where processing is based on consent. Some rights are not absolute, particularly where records must be retained for legal or professional reasons.
Requests can be made through the contact page. You can also complain to the UK Information Commissioner's Office if you are unhappy with how personal information has been handled.
Security and confidentiality
The clinic uses access controls, secure authentication, audit logging, restricted admin access and other technical and organisational measures designed to protect client information. Sensitive records are not intended to be placed in ordinary analytics or marketing systems.
No online service can guarantee absolute security. Please avoid placing detailed medical information in general-purpose contact messages unless it is necessary.
Changes to this notice
This notice will be reviewed when services, providers or legal requirements change. Material changes affecting how information is used will be reflected on this page before the new use begins where required.