Birmingham Skin and Physio Clinic ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who We Are

Birmingham Skin and Physio Clinic is the data controller responsible for your personal data collected through this website and in connection with our clinical services.

2. Information We Collect

  • Contact details (name, email address, phone number, address)
  • Appointment and booking information
  • Health information relevant to your treatment, provided during consultations (special category data under Article 9 UK GDPR)
  • Payment information, processed securely through our payment providers
  • Clinical photographs, where separately consented to
  • Website usage data (pages visited, device type, general location) via analytics and cookies

3. Lawful Basis for Processing

We process your personal data under the following lawful bases (Article 6 UK GDPR), and where relevant, Article 9(2)(h) for health data processed for the purposes of care:

  • Consent — for marketing communications and optional clinical photography
  • Contract — to provide the treatments and services you book
  • Legal obligation — to retain clinical records as required by healthcare regulation
  • Vital interest — in the case of a medical emergency

4. How We Use Your Information

  • Schedule, confirm, and manage your appointments
  • Provide safe, appropriate clinical care and aftercare
  • Send appointment confirmations and reminders via email, SMS, WhatsApp, or recorded phone call
  • Improve our services and website experience
  • Comply with legal and regulatory obligations, including those of the Care Quality Commission (CQC) where applicable

5. How We Protect Your Information

We use industry-standard security measures, including encrypted data storage, access-controlled systems, and secure booking forms, to protect your personal and health information from unauthorized access, loss, or misuse.

6. Sharing Your Information

We do not sell your personal information. We may share information with trusted third parties only where necessary — for example, payment processors, SMS/WhatsApp communication providers, or as required by law. Any international data transfers are made with appropriate safeguards in line with UK GDPR.

7. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate information
  • Request erasure of your data ("right to be forgotten"), subject to legal and clinical record-keeping requirements
  • Restrict or object to certain processing
  • Request data portability
  • Withdraw consent for marketing communications or clinical photography at any time

We will respond to any request within one month, free of charge, in line with statutory requirements.

8. Cookies

Our website uses cookies in accordance with PECR. Essential cookies are used to operate the site; analytics cookies are used only with your consent, and you can manage preferences through your browser settings.

9. Data Retention

We retain personal and health information only as long as necessary for clinical, legal, and regulatory purposes, in line with NHS and private healthcare record retention guidance.

10. Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. Contact Us

For questions about this Privacy Policy or your data, contact us at info@briminghamskinphysio.co.uk or call 0742 443 2701.