This privacy notice is a public declaration of how Balance Performance Physiotherapy Ltd (BPP Ltd) applies the Data Protection Principles and Rights afforded to individuals by the General Data Protection Regulation (GDPR), to the personal data that we process.
Balance Performance Physiotherapy Ltd is committed to complying with the 6 principles relating to the processing of personal data under the GDPR in all that we do. These principles are:
- Lawfulness, fairness & transparency
- Purpose limitation
- Data minimisation
- Storage limitation
- Integrity and confidentiality
What information is being collected?
We may collect, store and use the following kinds of personal data
(a) information about your visits to and use of our clinic
(b) information that you provide to us for the purpose of registering with us (including your name, email address, telephone number, postal address, and company details)
(c) information relating to any transactions carried out between you and us on or in relation to our service including information relating to any purchases you make of our services and products
(d) information that you provide to us for the purpose of subscribing to our text notifications, website services, email notifications, updates and/or newsletters
(e) any other information that you choose to send to us or provide to us while being treated at the clinic
Who is collecting it?
The data is collected by staff members of BPP Ltd, partners, third party associates and co-organisers.
How is it collected?
The data is collected via our paper-based client treatment notes, our website, 3rd party platforms, such as MindBodyOnline, Worldpay, Rackspace, QuickerNotes (this is an example of our platforms and is not an exhaustive list). It is further collected in person through personal connection by any of our staff, partners, associates and 3rd party co-organiser. We also collect data through our email, messaging services, via telephone and through other similar communication systems.
Why is it being collected?
The data is being collected in order to provide our service to our customers. To send statements and invoices, to collect payments, and deal with enquiries and complaints. To administer our website, improve your browsing experience by personalising the website and enable your use of the services available on the website. We may analyse the data to better understand our customers, their demographics and understand how we can help them. It assists us in service development and training of staff. We further collect the data in order to contact individuals and organisations in order to fulfil our business activity, market our services, events, offers and ensure that the data we hold is up to date.
If you choose not to give personal information
We may need to collect personal information by law, or under the terms of a contract we have with a client. If an individual chooses not to give us this personal information, it may delay or prevent us from meeting our obligations. It may also mean that we cannot perform services the client has requested. It could mean the necessity to cancel a product or service.
Where clients have made criminal record checks, credit checks, and employment screening conditional upon the issuance of an employment contract there may be implications for failing to complete the process. Balance Performance Physiotherapy Ltd takes no liability for the failure of individuals to engage with any employment screening process on behalf of a client. Any data collection that is optional would be made clear at the point of collection.
How will it be used?
Who will it be shared with?
The data will be shared with other partners and third-party organisations that we are working with to provide our services. We will never sell any data and only share data with partners who are working with us on a specific project. Those partners are not given access to any data for any project they are not a party to.
We will not without express consent from the individual provide personal information to any third parties for the purpose of direct marketing.
Third Party Websites
Our websites contain links to other websites. We are not responsible for the privacy policies or practices of third party websites.
Legal basis for processing information
Balance Performance Physiotherapy Ltd is required to process personal information of data subjects as part of its client contractual obligations in the performance of its services. All processing of personal data by BPP Ltd is carried out with the full and explicit consent of each data subject.
We may disclose information about you to any of our employees, officers, suppliers insofar as reasonably necessary to fulfil our obligations for the purposes as set out in this privacy statement.
In addition, we may disclose your personal information:
- to the extent that we are required to do so by law;
- in connection with any legal proceedings or prospective legal proceedings;
- in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
- to the purchaser (or prospective purchaser) of any business or asset which we are (or are contemplating) selling; and
- to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.
- except as provided in this privacy statement, we will not provide your information to third parties.
International data transfers
No data will be transferred outside of the United Kingdom without first discussing it with the data protection officer.
If you use our services or website while you are outside the United Kingdom, your information may be transferred outside the United Kingdom in order to provide you with those services.
Security of your Private Information
The application system is hosted within the Cloud using Dropbox and the online MindBodyOnline platform, with backups run daily. We continue to take all reasonable technical and organisational precautions to prevent the loss, misuse, or alteration of your personal information. All electronic transactions you make to or receive from us will be encrypted. Of course, data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.
You are responsible for keeping your password and user details confidential. We will not ask you for your password (except when you log in to our systems).
We retain personal data only for so long as it may be required to help provide our Services or where we believe we are required to retain data for legal purposes and we will not transfer data to any 3rd party without prior permission from the individual concerned.
Updating of information
Please let us know if the personal information which we hold about you needs to be corrected or updated.
BPP Ltd recognises further rights of data subjects under the GDPR which include;
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
More information on Direct Marketing
- The right to withdraw consent
- The right to complain to the Supervisory Authority
- Rights related to automated decision making and profiling
Contact details of any data controllers
Balance Performance Physiotherapy Ltd, 113 Gauden Road, Clapham, London, SW4 6LE
We may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. They help us to improve the Site and to deliver a better and more personalised service. Some of the cookies we use are essential for the site to operate. They enable us:
- to estimate our audience size and usage pattern
- to store information about your preferences, and so allow us to customise the Site according to aggregate preferences
- to speed up your searches; and to recognise you when you return to the site
The main cookies that we use provide us with valuable data about our website. These are from Google Analytics and are completely anonymous, telling us information such as how many people have visited our website and which pages are the most popular. This allows us to ensure that our website is doing its job and make improvements to help you use the site. If you would like to opt out, you can do so at http://tools.google.com/dlpage/gaoptout.
If you do not wish cookies to be used, the best way around this is to turn off cookies in your browser settings so that they are not used on any website. To do this, you can go to your privacy settings in either Tools or Options depending on your browser.
If we wish to use your personal data for a new purpose, not covered by this Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
Changes to this notice
We keep this Privacy Notice under regular review, and we will place any updates on this web page
www.balancephysio.com/privacynotice. This Notice was last updated in July 2023.
Please contact us if you have any questions about this Privacy Notice or the information we hold about you or to exercise all relevant rights, queries or complaints at:
The Data Controller, Balance Performance Physiotherapy Ltd, 113 Gauden Road, Clapham, London, SW4 6LE
Call: 020 7267 2308
You can contact the Information Commissioners Office via email: https://ico.org.uk/global/contact-us/, phone: 0303 123 1113 or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.