Privacy Policy | Next Step Physio

Effective date: 28/11/25

This privacy policy explains how I collect, use, and protect your personal information when you interact with Next Step Physio.

Next Step Physio is operated by: Sarah Barnes, 9 Cromer Road, Sale, Cheshire, M33 3EN Email: sarah@nextstepphysio.co.uk

We are registered with ICO and the data protection officer is Sarah Barnes.

What information I collect

When you interact with Next Step Physio, I may collect:

• Name

• Address

• Email address

• Phone number

• Health and medical details

• Private Medical Insurance details (if applicable)

• Payment information (processed securely via third-party providers)

• Information you share in forms, or questionnaires

• Technical data (e.g., IP address, browser type) through cookies or analytics

How I collect your information

I collect personal information when you:

• Book a physiotherapy appointment

• Contact me by email or through my websites/social media

• Visit my website (via cookies/analytics)

Why I collect your information

I use your information to:

• Provide physiotherapy services

• Respond to enquiries

• Provide you with appointment confirmations and reminders, exercise and advice sheets

• Send relevant updates, resources, and offers (only if you’ve opted in)

• Maintain records as required for legal, tax, and insurance purposes

Sharing your information

I will never sell your personal information.

I may use your information to communicate with other clinicians, your GP, Consultant or Private Medical Insurance Company (with consent)

I may share it with trusted third-party service providers where necessary, for example:

• Email platforms

• Exercise Prescription Software (Rehabmypatient)

• Booking systems (Cliniko)

• Website hosting and analytics services

All third parties are required to keep your information secure and process it only in accordance with my instructions.

Personal information will be shared where required to do so by law or in accordance with a court of competent jurisdiction. We will also disclose your information if we believe that lawful disclosure is necessary to comply with the law or to protect the security or integrity of our service.

How I protect your information

• Your data is stored securely on password-protected systems.

How long I keep your information

• Physiotherapy records: kept for the period required by law (currently 8 years for adults in the UK).

Your rights

You have the right to:

• Access the personal information I hold about you

• Request corrections or updates

• Ask for your data to be deleted (subject to legal obligations)

• Withdraw consent for marketing at any time. You can do this by emailing: sarah@nextstepphysio.co.uk

My website uses cookies and analytics tools to improve your experience. You can disable cookies in your browser settings if you prefer.

Updates to this policy

This policy may be updated from time to time. The latest version will always be available on my website or you can request a printed copy.

If you have any questions about this privacy policy or how your information is handled, please contact me at: sarah@nextstepphysio.co.uk