Last Updated: August 2026

At Simpson Physiotherapy (“we,” “us,” or “our”), we are committed to protecting and respecting your privacy and fulfilling our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, disclose, and safeguard your personal data when you visit our website (https://simpsonphysio.co.uk), request information, or use our physiotherapy and healthcare services.

1. Who We Are (Data Controller)

Simpson Physiotherapy is the data controller responsible for your personal data.

• Business Name: Simpson Physiotherapy

• Clinic Address: Suite 7, 5 Kirk Road, Bearsden, Glasgow, G61 3RG

• Contact Email: enquiries@simpsonphysio.co.uk

• Contact Phone: 0141 530 2092

2. Information We Collect

Because we provide healthcare services, we collect both standard personal data and “special category” data (health information).

A. Personal Data

• Contact & Identity Information: Your name, email address, phone number, physical address, and date of birth.

• Enquiry & Communications Data: Details provided when completing forms on our website (e.g., Requesting a Free Discovery Visit, Call Back requests, or Report downloads).

• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and details about your visit to our website via cookies and analytics.

B. Special Category (Health) Data

When you register as a client or receive clinical services, we may collect:

• Medical history, diagnostic reports, physician details, and clinical session notes.

• Details regarding mobility, speech, neurological conditions, lifestyle, and treatment goals.

3. How We Collect Your Data

We collect personal information through:

• Direct Interaction: Forms submitted on our website, telephone calls, emails, or during face-to-face/online clinical consultations.

• Website Enquiries: Downloading free reports, booking discovery visits, or filling out callback requests.

• Third Parties / External Healthcare Providers: GP or specialist referrals, or family members acting with your consent.

• Automated Technologies: Cookies and web analytics as you navigate our website.

4. How We Use Your Data & Legal Bases

We rely on specific legal grounds under UK GDPR to process your personal data:

5. Sharing Your Personal Data

We never sell your personal information. We may share your data with trusted third parties only when necessary:

• Multidisciplinary Healthcare Professionals: With your consent, we may communicate with your GP, consultant, or other specialists involved in your care.

• Service Providers / Data Processors: Practice management software providers, website hosts, secure IT/cloud platforms, and administrative platforms.

• Regulatory & Legal Authorities: Healthcare regulators (e.g., HCPC), law enforcement, or insurers if legally required or necessary for clinical compliance.

6. How We Store and Protect Your Data

• Security Measures: We use secure electronic practice management software, encrypted network communication, and restricted physical access to clinical files to ensure your data is protected against loss, unauthorized access, or disclosure.

• International Data Transfers: If any third-party tool processes data outside the UK/EEA, we ensure adequate safeguards (such as Standard Contractual Clauses or UK Addendums) are in place.

7. Data Retention

• Adult Health Records: In accordance with professional UK healthcare guidelines (including CSP guidelines), clinical medical records are retained for a minimum of 8 years after the conclusion of treatment.

• Paediatric Records: Retained until the patient turns 25 (or 8 years after their 18th birthday), or 8 years after death if applicable.

• General Enquiries / Marketing Data: Retained only as long as necessary to fulfill the enquiry or until you request deletion/unsubscribe.

8. Your Legal Rights

Under UK GDPR, you have the following rights regarding your personal data:

1. Right to Access: Request a copy of the personal data and health records we hold about you (Subject Access Request).

2. Right to Rectification: Request correction of inaccurate or incomplete information.

3. Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data (Note: this is subject to legal exceptions requiring us to retain medical records).

4. Right to Restrict or Object: Object to or restrict how we process your personal data (e.g., opting out of marketing).

5. Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at enquiries@simpsonphysio.co.uk.

9. Cookies and Analytics

Our website uses cookies to distinguish you from other users, personalize content, and analyze site traffic.

• You can adjust your browser settings to refuse some or all cookies.

• Blocking necessary cookies may impair your ability to use certain features on our website.

10. How to Complain

If you have concerns about how we handle your personal data, please contact us first so we can resolve the issue:

• Email: enquiries@simpsonphysio.co.uk

• Phone: 0141 530 2092

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

• Website: https://ico.org.uk

• Helpline: 0303 123 1113