onlineyogaphysio.co.uk

Privacy Policy

Last updated: 20 August 2025

Online Yoga Physio (operated by Susie Hartnoll) is committed to protecting your privacy and handling your personal information securely, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1) Controller & Contact

The data controller is Susie Hartnoll, Online Yoga Physio (online only).
If you have questions or wish to exercise your data rights, contact:

2) What information we collect

  • Identity & contact details: name, date of birth, address, email, telephone number.

  • Health information relevant to physiotherapy assessment and treatment.

  • Appointment and communication records (via email or contact form).

  • Telehealth data via Rehab Guru.

  • Media (photos/videos) with explicit consent.

  • Payment details (processed by Stripe in Rehab Guru – not stored by us).

3) How we collect information

  • Information you provide via contact form, email, or Rehab Guru booking.

  • During telehealth sessions on Rehab Guru or group classes/workshops on Google Meet.

4) How we use your information

  • To provide physiotherapy care, exercise programmes, and classes.

  • To manage bookings and payments (Rehab Guru is our main booking platform).

  • To maintain accurate clinical records.

  • To communicate with you about your care.
    We never share data with third parties for marketing.

5) Lawful basis for processing

  • Contract – delivering services you request.

  • Medical purposes – processing health data by a registered professional.

  • Consent – for optional items (e.g., photos, videos, newsletters).

6) Sharing of information

Your data is shared only with trusted providers essential to delivering your care:

  • Rehab Guru – telehealth, booking, exercise database, and records.

  • Stripe – secure payment processing via Rehab Guru.

  • Google Calendar / Google Meet – scheduling and delivering group classes.

We will only share your information with other health professionals (e.g., your GP) with your consent, unless required by law or to protect vital interests.

Provider Privacy Notices

You can read the full privacy policies of these providers here:

7) International transfers

Rehab Guru, Stripe, and Google may process data outside the UK/EEA but use safeguards such as contractual clauses or adequacy decisions.

8) Retention

Clinical records are retained for at least 8 years after your last contact, or until a child’s 25th birthday if longer.

9) Your rights

You have the right to: be informed, access, rectify, erase (where possible), restrict or object to processing, and request portability.
To exercise your rights, email susie@onlineyogaphysio.co.uk.
More info: ico.org.uk/for-the-public

10) Complaints

If you are unhappy, please contact me first. You may also complain to the ICO: ico.org.uk/concerns | 0303 123 1113.

11) Changes

This Privacy Policy may be updated and any changes will appear here with a new date.