• 07300 300 424
  • hello@ther3hablab.com
  • Mon-Sun : 8.00 AM - 8.00 PM

PRIVACY POLICY

Last updated: [August 2025]

[THE R3HAB LAB] (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you visit our website or use our physical therapy services.

1. Who We Are

[THE R3HAB LAB]
[461 LICHFIELD RD, BIRMINGHAM, B6 7SS]
[07300 300 424]
[hello@ther3hablab.com]
Data Controller: [TBC]
ICO Registration: [TBC]

2. What Data We Collect

We may collect and process the following types of data:

A. Personal Identification Data

  • Full name

  • Date of birth

  • Contact details (phone, email, address)

  • Emergency contact

B. Health & Treatment Data

  • Medical history and current conditions

  • GP or consultant details

  • Treatment notes and progress reports

  • Exercise programmes or care plans

  • Consent forms and outcome measures

C. Booking & Payment Data

  • Appointment history

  • Payment method (not full card details unless via third party)

  • Billing or insurance details

D. Website & Marketing Data

  • IP address and browser type (via cookies)

  • Contact form submissions

  • Newsletter subscription preferences

3. How We Use Your Data

We use your data to:

  • Provide and manage our clinical services

  • Maintain accurate clinical records

  • Book and confirm appointments

  • Send invoices or collect payment

  • Communicate with you about your care

  • Comply with legal or regulatory obligations

  • Send optional marketing communications (if you’ve opted in)

We will only use your data where we have a lawful basis, such as:

  • Consent (for treatment and marketing)

  • Contract (to deliver the services you request)

  • Legal obligation (medical recordkeeping, tax)

  • Legitimate interest (follow-up care, feedback)

4. Sharing Your Data

We only share your data when necessary, such as:

  • With your GP or healthcare provider (with your consent)

  • With insurance companies (if relevant to your care)

  • With regulatory bodies if required (e.g. HCPC, CSP, ICO)

  • With third-party service providers (e.g. payment processors, booking software) under contract and data protection agreements

We do not sell or rent your data to third parties.

5. Data Retention

We retain your personal and health data:

  • For 8 years after your last appointment (or until age 25 if treated as a minor), as required by UK health recordkeeping guidelines

  • For marketing preferences, until you unsubscribe

  • For financial transactions, for 6 years in line with HMRC requirements

6. Your Rights Under UK GDPR

You have the right to:

  • Access a copy of your personal data

  • Request correction of inaccurate data

  • Request erasure of data (unless we must keep it for legal reasons)

  • Object to processing for direct marketing

  • Withdraw consent at any time

  • Lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk

To exercise any of these rights, email us at: [contact@ther3hablab.com]

7. Data Security

We use appropriate security measures to protect your data, including:

    • Encrypted storage of digital records

    • Password-protected systems

    • Limited staff access to sensitive information

  • Secure third-party platforms compliant with UK data laws

8. Cookies & Website Use

Our website may use cookies to enhance user experience. You will be asked to consent to their use when you visit the site. Cookies may collect anonymous data such as IP address, browser type, and session behaviour.

You can manage or delete cookies through your browser settings.

9. Third-Party Links

Our website may contain links to third-party services (e.g. booking platforms, social media). We are not responsible for the content or privacy practices of external websites.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the “Last updated” date clearly shown.

11. Data Breach & ICO Reporting

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms:

  • The clinic will assess and document the breach without undue delay
  • Where required, the breach will be reported to the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of it
  • Affected individuals will be informed promptly where there is a high risk
  • We maintain a breach register in line with UK GDPR accountability requirements

Contact Us

If you have any questions or concerns about this policy or how we handle your data, please contact:

[THE R3HAB LAB]
[461 LICHFIELD RD, BIRMINGHAM, B6 7SS]
[07300 300 424]
[hello@ther3hablab.com]