Privacy Policy

BOOST PHYSIO Privacy Policy

Last updated: 20 July 2025

BOOST PHYSIO Ltd (“we”, “our”, “us”) is committed to protecting your privacy and complying with UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). This Privacy Policy outlines how we collect, use, store, and share your personal data across our clinics, website, communications, and digital advertising.

1. Data Controller and Contact Details

The data controller is:

BOOST PHYSIO Ltd.

Lead Person: Steven Berkman.

Address: 16 Parson Street, London, NW4 1QB

Phone: 020 8201 7788 Email: info@boostphysio.com

2. What Data We Collect and Legal Basis

3. How We Use Your Data

To provide and manage clinical care, treatment and bookings

To communicate with you about appointments or clinical issues

To send newsletters, promotions, and service updates (with your consent)

To track website usage and improve performance (cookies/analytics)

To run online advertising campaigns with Google, Meta (Facebook/Instagram), etc.

4. Cookies and Analytics

We use cookies to enhance website functionality and track user interactions:

Essential cookies – Required for basic site operations (no consent needed)

Analytics cookies – Help us analyse site traffic (consent required)

Marketing cookies – Support advertising on platforms like Google Ads and Meta Ads (consent required)

You can update your cookie preferences at any time via our Cookie Consent Banner or link in the footer.

5. Email, SMS Marketing, WhatsApp

We only send marketing messages via email, SMS or WhatsApp where we have your consent. All communications include clear unsubscribe options. You may opt out at any time.

We use third-party processors such as Mailchimp, Twilio, Respond.io to manage our marketing campaigns. These providers are subject to GDPR-compliant data processing agreements.

6. Advertising

We may use anonymised or pseudonymised cookie data to:

Show ads via Google Ads or Meta platforms (only with consent)

Perform remarketing to website visitors

We do not use sensitive health data for advertising targeting.

7. Data Sharing

We may share data with trusted third parties:

Clinical software providers (e.g. Jane App that is GDPR compliant, secure and retains all our clinical information)

Marketing platforms (e.g. Mailchimp, Meta, Google)

IT and website service providers

All third parties are bound by data processing agreements to ensure data protection.

8. Data Retention

Clinical records: Held for 8 years, or until age 25 for children (in line with NHS and ICO guidance)

Marketing data: Retained until consent withdrawn or after 5 years

Cookie/analytics data: Retained per platform retention periods (e.g. 14–26 months)

9. Your Rights

You have the right to:

Access your personal data

Correct inaccuracies

Request deletion (where applicable)

Restrict or object to processing

Withdraw consent at any time

Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact us at: info@boostphysio.com

10. Data Security

We implement appropriate technical and organisational measures:

Encryption and secure storage of data

Role-based access controls

Regular staff training on data privacy

Breach detection and reporting protocols

11. Policy Updates

We may update this Privacy Policy periodically. Changes will be published on this page and, where appropriate, notified to you directly.

For questions about this policy or to exercise your rights, please contact our team at info@boostphysio.com or call 020 8201 7788.

Thank you for trusting BOOST PHYSIO with your personal data. Your privacy is important to us.