Rosalie Physiotherapy - Patient Privacy Notice

Last updated: October 2026

This privacy notice explains how Rosalie Physiotherapy collects, uses, and protects your personal and medical data. As a physiotherapy clinic, we are bound by strict professional and legal duties under UK GDPR.

1. What Data is collected

When you book an appointment or receive treatment, we collect personal details (name, contact info, date of birth) and health information (medical history, injury details, clinical assessment notes).

2. Why Collect It & Legal Basis

We process your personal details to manage your appointments. We process your health data because it is necessary for providing direct healthcare and medical treatment.

3. How Your Data is Stored

Your clinical records and booking details are securely stored inside WriteUpp, our GDPR-compliant clinical management software. Your notes are encrypted and accessible only by a registered Physiotherapist.

4. Data Retention

By law (under UK healthcare regulations), we are required to keep adult clinical records for a minimum of 8 years after your last treatment. For children, records are kept until their 25th birthday.

5. Your Rights

You have the right to request a copy of your medical records, ask for factual errors to be corrected, or complain to the Information Commissioner's Office (ICO) if you have concerns about how your data is handled.

6. Contact Our Data Controller

For any data queries, contact hello@rosaliephysiotherapy.co.uk| Postal address: Rosalie Physiotherapy, Unit 168897, P O Box 6945, London, W1A 6US.