Patient Privacy Policy

P6 Issue June 2026

Who we are

Cadbury Physiotherapy Clinic Ltd is a company registered in England and Wales. We are the data controller for the

personal and special category information we collect and use.

What information we collect

To provide our services, we collect information such as:

 Name, address and date of birth.

 Telephone number and email address.

 Medical history, health information and treatment records.

 Appointment and payment information where required.

We may also receive relevant information from your GP, consultant, other healthcare professionals, insurers,

solicitors or case managers, where appropriate.

Health information is classed as special category data under UK GDPR and receives extra protection.

How we use your information

We use your information to:

 Provide safe and effective physiotherapy, treatments and services.

 Communicate with you (via Service providers)

 Arrange appointments, record clinical notes and files, invoices/receipts (WRITEUPP diary system).

 Create exercise programmes (WIBBI) and use clinical assessment systems (VALD).

 Store records (using Cloud services)

 Process payments (YETIPAY) and manage accounts, including insurance claims (with individual healthcare

providers and Healthcode)

 Meet our legal and professional obligations.

We process your information to provide healthcare services, comply with our legal obligations and, where required,

with your consent.

Sharing your information

We only share your information when necessary for your care, to administer our services, or where required by law.

This may include sharing information with your GP, other healthcare professionals, Insurers, Solicitors, Case

Managers, Healthcode, WRITEUPP, WIBBI, VALD, YETIPAY or debt recovery agencies where appropriate. We also

share your information with our service providers, to communicate with you and send updates about our services.

We never sell your personal information.

Marketing

We may occasionally email existing patients information about our services, news and updates about our services,

using a service provider, where permitted by law. You can opt out at any time using the unsubscribe link in our

emails, or by contacting us directly.

How long we keep your information

Your records are stored securely in electronic format only. Adult patient records are normally retained for 8

years after your last appointment. Records for patients under 18 are kept in accordance with Chartered Society of

Physiotherapy (CSP) guidance.

Keeping your information secure

We use secure electronic systems, password protection, restricted staff access and other appropriate security

measures to protect your personal information.

Your rights

Under UK GDPR you have the right to:

 Access the personal information we hold about you.

 Ask us to correct inaccurate information.

 Request restriction or deletion of your information where applicable.

 Object to certain processing.

 Withdraw your consent where we rely on it.

To exercise your rights, make a Subject Access Request or ask a question about this Policy, please contact us.

Contact us

Cadbury Physiotherapy Clinic Ltd, Miiko, 33 Salterns Road, Poole, Dorset BH14 8BL

Email: info@cadburyphysiotherapy.com or Telephone: 07931 041880

If you are unhappy with how we handle your personal information, please contact us first. If you remain dissatisfied,

you have the right to complain to the Information Commissioner's Office (ICO).