Privacy Policy

Advanced Physio & Sports Injury Ltd 
Effective Date: 15/05/2026 
Last Updated: 15/05/2026 

1. Introduction 

Welcome to Advanced Physio& Sports Injury Ltd (“we”, “us”, “our”). We are committed to protecting and respecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you: 
Visit our website; 
Contact us by phone, email, social media, or online forms; 
Book or attend appointments; 
Receive physiotherapy or musculoskeletal (MSK) services from us; 
Subscribe to communications from us; or 
Otherwise interact with our clinic. 
We process personal data in accordance with: 
The UK General Data Protection Regulation (UK GDPR); 
The Data Protection Act 2018; and 
Other applicable privacy and healthcare laws. 
By using our website or services, you acknowledge the practices described in this Privacy Policy. 

2. Who We Are 

Business Name: Advanced Physio& Sports Injury Ltd 
Business Address: Lane End Works, Middleton Road, Royton, Oldham, OL2 5LS 
Email Address: hello@apsi.health 
Telephone Number: 0161 414 0288 
Website: www.apsi.health 
Advanced Physio& Sports Injury Ltd is the data controller responsible for your personal information. If you have any questions about this Privacy Policy or your data, please contact us using the details above. 

3. The Information We Collect 

We may collect and process the following categories of personal data. 

3.1 Personal Identification Information 

This may include: 
Full name; 
Date of birth; 
Home address; 
Email address; 
Telephone number; 
Emergency contact details. 

3.2 Health and Medical Information 

As a physiotherapy and MSK clinic, we may collect special category health data, including: 
Medical history; 
GP and healthcare provider details; 
Injury and condition information; 
Treatment notes; 
Assessment findings; 
Rehabilitation plans; 
Medication information; 
Diagnostic reports or imaging; 
Appointment history. 

3.3 Website and Technical Information 

When you use our website, we may collect: 
IP address; 
Browser type and version; 
Device information; 
Operating system; 
Pages visited; 
Date and time of access; 
Website usage analytics; 
Cookie data. 

3.4 Communication Information 

We may keep records of: 
Emails; 
Telephone conversations; 
Contact form submissions; 
Social media messages; 
Appointment requests and enquiries. 

3.5 Payment Information 

Where applicable, we may collect: 
Billing information; 
Payment transaction details. 
We do not store full card payment details unless processed securely through an authorised payment provider. 

4. How We Collect Your Information 

We collect information: 
Directly from you when you contact or book with us; 
During consultations and treatment sessions; 
Through online forms and website interactions; 
Via cookies and analytics technologies; 
From referrals or healthcare professionals where appropriate; 
From insurers or third-party healthcare providers where relevant and authorised. 

5. Legal Basis for Processing Your Data 

Under UK GDPR, we rely on the following lawful bases for processing your data. 

5.1 Contractual Necessity 

We process your information to: 
Provide healthcare services; 
Manage appointments; 
Respond to enquiries; 
Administer patient records; 
Process payments. 

5.2 Legitimate Interests 

We may process data where necessary for legitimate business interests, including: 
Improving our services; 
Managing our website; 
Preventing fraud; 
Maintaining clinic security; 
Responding to complaints or legal claims. 

5.3 Consent 

We may rely on consent for: 
Marketing communications; 
Certain cookies; 
Sharing information where consent is required.
You may withdraw consent at any time by emailing us: hello@apsi.health  

5.4 Healthcare and Medical Purposes 

Health information is processed under Article 9 UK GDPR for the provision of health or social care and treatment. 

5.5 Legal Obligations 

We may process information where required by law, including: 
Regulatory obligations; 
Insurance requirements; 
Tax and accounting obligations; 
Safeguarding responsibilities. 

6. How We Use Your Information 

We may use your information to: 
Provide Physiotherapy and MSK treatment; 
Maintain clinical records; 
Arrange and manage appointments; 
Communicate with you regarding your care; 
Send appointment reminders; 
Process payments and invoices; 
Improve our services and website; 
Comply with legal and professional obligations; 
Respond to enquiries and complaints; 
Protect the safety and security of patients, staff, and visitors. 
Where you have opted in, we may also send: 
Newsletters; 
Service updates; 
Health-related information; 
Promotional communications.
You can opt out of marketing communications at any time by emailing us: hello@apsi.health 

7. Sharing Your Information 

We will only share your personal data where necessary and lawful. We may share information with: 
GPs and healthcare professionals involved in your care; 
Medical insurers; 
Payment processors; 
IT and website service providers; 
Appointment booking systems; 
Professional advisers; 
Regulators, legal authorities, or law enforcement where required. 
All third parties are required to respect the security and confidentiality of your data. We do not sell your personal data. 

8. Data Retention 

We retain personal data only for as long as necessary. Healthcare records may be retained in line with NHS guidance, professional standards, legal requirements, and insurance obligations. Retention periods may vary depending on: 
The nature of the treatment provided; 
Legal obligations; 
Insurance requirements; 
Potential legal claims.
When information is no longer required, it will be securely deleted or destroyed. 

9. Data Security 

We take appropriate technical and organisational measures to protect your personal data from: 
Unauthorised access; 
Loss; 
Misuse; 
Alteration; 
Disclosure; 
Destruction. 
Security measures may include: 
Password-protected systems; 
Secure storage of records; 
Restricted staff access; 
Encryption; 
Secure website hosting; 
Secure third-party service providers. 
While we take reasonable precautions, no method of electronic transmission or storage is completely secure. 

10. Cookies and Website Tracking 

Our website may use cookies and similar technologies to: 
Improve website functionality; 
Analyse website traffic; 
Enhance user experience; 
Remember preferences. 
Cookies are small text files placed on your device. You can control or disable cookies through your browser settings. Depending on your website setup, we may use: 
Essential cookies; 
Analytics cookies; 
Functional cookies; 
Marketing cookies. 
Where required, we will request your consent before placing non-essential cookies. 

11. Third-Party Links 

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites. We encourage users to review the privacy policies of those websites before providing personal information. 

12. International Transfers 

Where personal data is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR. 

13. Your Rights Under UK GDPR 

You have the following rights regarding your personal data: 
Right of Access 
You may request access to the personal data we hold about you. 
Right to Rectification 
You may request correction of inaccurate or incomplete data. 
Right to Erasure 
You may request deletion of your personal data in certain circumstances. 
Right to Restrict Processing 
You may request restriction of processing under certain conditions. 
Right to Data Portability 
You may request transfer of your data to another provider where applicable. 
Right to Object 
You may object to certain types of processing, including direct marketing. 
Rights Related to Automated Decision-Making 
We do not generally use automated decision-making or profiling in a way that has legal or significant effects on individuals. To exercise any of your rights, please contact us using the details provided above. We may request proof of identity before responding to requests. 

14. Children’s Privacy 

Our services are not primarily directed at children under 18 without parental or guardian involvement. Where treatment is provided to children, personal data may be collected with appropriate parental or legal guardian consent where required. 

15. Complaints 

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue. You also have the right to complain to the UK Information Commissioner’s Office (ICO). 
Information Commissioner’s Office (ICO) 
Website: https://ico.org.uk 
Telephone: 0303 123 1113 

16. Changes to This Privacy Policy 

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised “Last Updated” date. We encourage you to review this policy periodically. 

17. Contact Us 

If you have any questions about this Privacy Policy or how your personal information is handled, please contact: 
Advanced Physio & Sports Injury Ltd 
Lane End Works, Middleton Road, Royton, Oldham, OL2 5LS 
hello@apsi.health 
0161 414 0288 
www.apsi.health