Privacy Policy
Last updated: 22 July 2026
Align Home Physio (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal information we collect, why, how we use it, and your rights over it, in line with UK GDPR and the Data Protection Act 2018.
Who we are
Align Home Physio is the data controller for the personal information described in this policy. [Business address / company registration number if applicable — confirm with client.] If you have any questions about this policy or how we handle your data, contact us at [email address — confirm with client].
Information we collect
We collect information you provide directly to us, including:
- Contact details: name, phone number, email address, postcode/area
- Health-related information you choose to share, such as your reason for enquiring or your condition, when you submit our enquiry or booking form
- Messages you send us through our contact form
- Your email address, if you subscribe to our newsletter
We do not collect payment information through this website.
How we use your information
We use your information to:
- Respond to your enquiry and arrange consultations or appointments
- Provide physiotherapy services you've requested
- Send you updates you've opted into (such as our newsletter), which you can unsubscribe from at any time
- Meet our legal and professional obligations as a healthcare provider
Legal basis for processing
Where you submit an enquiry or booking request, we process your contact details on the basis of taking steps at your request prior to entering a service agreement. Because our enquiry form may include health-related information (a special category of data under UK GDPR), we only process this with your explicit consent, given by submitting the form. You can withdraw this consent at any time by contacting us, though this may affect our ability to provide treatment. Newsletter emails are sent only with your consent, given when you subscribe.
Who we share your information with
We use the following third-party services to operate this website and store enquiry data securely:
- Supabase (database and hosting infrastructure) — [confirm Supabase's data hosting region, e.g. EU, with the client / Supabase's own documentation]
- [Any email service used to send notifications — confirm with client]
We do not sell your personal information to any third party. We may disclose information where required by law, or to protect the vital interests of you or another person in an emergency.
How long we keep your information
[Retention periods for healthcare records are subject to specific professional guidance — confirm the correct retention period with the Chartered Society of Physiotherapy / HCPC guidance and with the client before publishing. As a placeholder: enquiry and treatment-related records are typically kept for a period appropriate to healthcare recordkeeping obligations, and newsletter subscriber data is kept until you unsubscribe.]
Your rights
Under UK GDPR, you have the right to:
- Access the personal information we hold about you
- Ask us to correct inaccurate information
- Ask us to delete your information, in certain circumstances
- Object to or restrict our processing of your information
- Withdraw consent at any time, where processing is based on consent
- Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we haven't handled your data properly
To exercise any of these rights, contact us at [email address — confirm with client].
Cookies
[This section depends on what analytics/cookies the site actually uses once built — confirm with the client/developer before publishing. As a placeholder: this website may use essential cookies required for the site to function, and, if analytics are added later, this section must be updated to describe them and a cookie consent banner must be implemented in line with UK PECR rules.]
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised.