Privacy Policy

Our Contact Details

The Type of Personal Information We Collect

We currently collect and process the following information:

• Personal identifiers, contacts and characteristics (for example, name and contact details)
• Insurance Membership Details and authorisation codes
• Customer Financial Information

How We Get the Personal Information and Why We Have It

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• To maintain health records
• To submit health insurance claims on behalf of our clients
• To process payments in exchange for our services

We may share this information with other healthcare organisations who form our network of healthcare providers.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

• (a) Your consent. You are able to remove your consent at any time. You can do this by contacting info@methodphysio.co.uk
• (b) We have a contractual obligation.
• (c) We have a legal obligation.

How We Store Your Personal Information

Your information is securely stored.

We keep personal identifiers, insurance details and financial information for the time you are a customer with us. We will then dispose your information by archiving your file and permanently deleting this information from our client management system.

Who Processes Your Data on Our Behalf

To deliver and manage your care we use trusted third-party software providers ("data processors") who process your information only on our instructions and under written data-processing agreements:

• Cliniko — our clinical records and practice-management system (your patient record, contact details and appointments). Hosted in the UK.
• Supabase — secure database hosting for your rehabilitation-programme data. Hosted in the EU.
• Cloudflare — secure website and application hosting.

Your personal information is stored within the UK/EU, encrypted in transit and at rest, and access is restricted to authorised Method Physio clinicians.

Your Data Protection Rights

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at info@methodphysio.co.uk if you wish to make a request.

How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at:

You can also complain to the ICO if you are unhappy with how we have used your data.