Life Beyond Pain
Last Updated: [Date, e.g., 1 October 2023]
1. Introduction
Life Beyond Pain (“we,” “our,” or “us”) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website (lifebeyondpain.clinic) and when you use our physiotherapy and coaching services (the “Services”).
By using our Site and Services, you agree to the terms of this Privacy Policy.
2. Information We Collect
We collect information that you provide directly to us and through automated technologies.
a) Information You Provide to Us:
- Contact Information: Your name, email address, phone number, and home address when you fill out a contact form, book a consultation, or sign up for our newsletter.
- Health Information: Detailed information about your health, medical history, pain condition, and lifestyle provided during consultations, in intake forms, or during our sessions. This is considered “Special Category Data” under data protection laws.
- Payment Information: Billing details. Please note that we use third-party payment processors (like Stripe or PayPal) and do not store your credit/debit card details on our servers.
- Communications: Records of our correspondence, including emails and messages.
b) Information Collected Automatically:
- Technical Data: Your IP address, browser type, operating system, and device information when you visit our Site.
- Usage Data: Information about how you use our Site, such as pages visited, time spent on pages, and referring website addresses, collected via cookies and similar tracking technologies.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To Provide Our Services: To schedule and conduct physiotherapy and coaching sessions, manage your care plan, and process payments.
- To Communicate with You: To respond to your inquiries, send you appointment reminders, administrative information (e.g., changes to our policies), and, with your permission, relevant health information or newsletters.
- To Improve Our Site: To analyse how our Site is used so we can improve its content and functionality.
- For Legal and Regulatory Compliance: To comply with our legal obligations, such as maintaining records for tax and healthcare regulatory purposes.
4. Legal Basis for Processing Your Data (UK/GDPR Specific)
Our legal basis for processing your personal data, including sensitive health information, is:
- Explicit Consent: You have given clear explicit consent for us to process your health data for the purposes of providing you with healthcare and treatment.
- Contractual Necessity: Processing is necessary for the performance of the contract (e.g., providing the Services you have booked).
- Legal Obligation: Processing is necessary for us to comply with our legal and regulatory obligations as a healthcare provider.
- Legitimate Interests: For our marketing and website analytics, we rely on our legitimate interests, which are balanced against your rights.
5. How We Share Your Information
We respect the confidentiality of your information. We will only share it in the following limited circumstances:
- With Your Explicit Consent: For example, if we need to communicate with your GP or another healthcare professional, we will always ask for your permission first.
- Service Providers: We share data with trusted third parties who assist us in operating our website and providing our Services (e.g., our email marketing provider, booking system, and payment processor). These partners are bound by strict data processing agreements.
- For Legal Reasons: If required by law, such as to comply with a court order or to protect the vital interests of yourself or another person.
6. Data Security
We implement appropriate technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These include secure servers, data encryption, and controlled access to personal files.
7. Data Retention
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or medical reporting requirements. In line with UK healthcare guidelines, we typically retain adult patient records for 8 years after your last session.
8. Your Data Protection Rights
Under data protection law, you have rights including:
- Your right of access: You have the right to ask us for copies of your personal information.
- Your right to rectification: You have the right to ask us to rectify personal information you think is inaccurate.
- Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing: You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
To exercise any of these rights, please contact us using the details in Section 10.
9. Cookies
Our Site uses cookies and similar technologies to distinguish you from other users. This helps us to provide you with a good experience and allows us to improve our Site. You can set your browser to refuse all or some browser cookies, but this may affect how the Site functions.
10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
Mark Archer
Life Beyond Pain
hello@lifebeyondpain.clinic
07968970391
11. Changes to This Privacy Policy
We may update this policy from time to time. The updated version will be indicated by an updated “Last Updated” date at the top of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your information.