Privacy Policy

---

Who collects information?

Rooke Physiotherapy is the trading name for Sophie Rooke, Musculoskeletal Physiotherapist.  

I am dedicated to safeguarding your privacy when you visit my website or communicate with me electronically. This privacy policy explains how I collect, use, and protect your personal information. By visiting the Rooke Physiotherapy website and providing your personal details, you consent to the collection, use, and transfer of your information as outlined in this policy.

Why is the information collected?

I retain medical records for the minimum period required to meet professional and legal obligations imposed by the Heath Care Professions Council and Chartered Society of Physiotherapy . The minimum retention period for adults in England is eight years. After this period, your personal information will be destroyed.

I comply with UK Data Protection laws, and my practice management system adheres to the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). Your personal information will be managed by Rooke Physiotherapy, as the data controller, and the Cliniko practice management system, as the data processor.

Third Parties

I do not sell, rent, or share your personal information with third parties, except those directly involved in managing your appointments, maintaining medical records, or processing payments. With your explicit consent, I may share information with other healthcare providers, such as GPs or Consultants, to support your ongoing care.

My company’s website is hosted on the GoDaddy.com platform. Your data may be stored through GoDaddy.com’s data storage, databases and the general GoDaddy.com applications. They store your data on secure servers behind a firewall.   

Communications

I will use your contact details to assist with appointment management, including confirmations, changes, and reminders. Occasionally, I may contact you with limited marketing or promotional materials.

Security

While I take reasonable measures to protect your personal information, the transmission of data over the internet is not fully secure, and any transmission is at your own risk. We do not store your payment details and use Stripe (www.stripe.com) for secure payment processing. Stripe encrypts payment information before transmission, providing added security for your financial data. I recommend that clients send personal information via encrypted email to enhance security.

Access to Your Personal Information and Questions

You have the right to request access to the personal information I hold about you under data protection laws.  If you would like to: access, correct, amend or delete any personal information I have about you, or if you have any questions about this policy, please submit a written request via email to Sophie@rookephysiotherapy.co.uk, and I will provide the information within 30 days, as required by law.