Privacy Policy

Effective date: 17/11/2025

1. Introduction

Welcome to Joint Initiative Physiotherapy (“we,” “our,” or “us”). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect the personal information you provide when using our website, [your website URL], and any services we offer through it.

By using our website, you agree to the terms of this Privacy Policy.

2. Information We Collect

We may collect and process the following types of personal information:

  • Contact information: Name, email address, phone number.

  • Health information: Only if voluntarily provided through contact forms, appointment requests, or during treatment (including medical histories, consent forms, and SOAP notes).

  • Website usage information: IP addresses, browser type, pages visited, and how you interact with our website.

  • Cookies and tracking technologies: See Section 7 for more details.

3. How We Use Your Information

We use the information you provide for purposes including:

  • Responding to your enquiries and appointment requests.

  • Providing our physiotherapy services.

  • Recording and securely storing client consent forms and clinical notes to provide safe and effective care.

  • Sending updates or relevant information about our services (with your consent).

  • Improving our website, services, and user experience.

  • Complying with legal obligations.

We will not sell or rent your personal data to third parties.

4. How We Share Your Information

We may share your personal information with:

  • Service providers: For website hosting, IT services, and email communication.

  • Legal authorities: If required by law.

All third parties we work with are required to protect your personal data in accordance with data protection laws.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, or disclosure.

Specifically:

  • Clinical records, consent forms, and SOAP notes are stored securely using Google Workspace (Google Ireland Limited) under a GDPR-compliant Data Processing Agreement.

  • Access is restricted to authorized personnel only.

  • Data is encrypted in transit and at rest.

  • All accounts accessing this data have 2-Step Verification enabled.

  • Devices used to access records are password-protected and encrypted.

6. Data Retention

We retain client records, consent forms, and SOAP notes for 8 years following the end of treatment, in line with professional guidelines. After this period, records are securely deleted or anonymized.

7. Your Rights

Under data protection laws, you have the right to:

  • Access the personal data we hold about you.

  • Request corrections to your data.

  • Request deletion of your data.

  • Object to processing or request restriction of processing.

  • Withdraw consent at any time (where processing is based on consent).

To exercise your rights, please contact us at [your email address].

8. Cookies and Tracking

Our website uses cookies to improve your browsing experience and understand website traffic. You can manage your cookie preferences through your browser settings. For more information, see our Cookie Policy.

9. Third-Party Links

Our website may include links to third-party websites. We are not responsible for the privacy practices of these websites, and we encourage you to read their privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with a revised effective date.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at:

Joint Initiative Physiotherapy
Email: info@jointinitiativephysio.co.uk
Phone: 07549 323500
Business Address: Exchange Street Buildings, 35-37 Exchange Street, Norwich, NR2 1DP