Privacy Policy:
Last updated: 21 October 2025
This Privacy Policy explains how Lydia Heins Physiotherapy (“we”, “our”, or “us”) collects, uses, and protects your personal information when you visit our website or use our services. We are committed to ensuring your privacy and complying with UK data protection laws, including the UK GDPR and the Data Protection Act 2018.
1. Who We Are
Business Name: Lydia Heins Physiotherapy
Location: Northern Ireland, United Kingdom
Data Controller: Lydia Heins
Contact: lydiaheinsphysiotherapy@outlook.com or via phone/text/iMessage/WhatsApp (details on website).
We are registered with the Information Commissioner’s Office (ICO) for data protection compliance.
2. What Information We Collect
We may collect the following information:
-
Personal details: Name, address, date of birth, and contact details.
-
Health information: Medical history, symptoms, treatment notes, and progress records required for physiotherapy care.
-
Booking details: Appointment information collected through the Wix website booking form.
-
Communication records: Messages sent by email, text, iMessage, or WhatsApp.
-
Marketing data: Information gathered from Facebook and Google Ads, such as analytics, engagement metrics, or referral data (this may include anonymised cookies or device data).
3. How We Collect Information
We collect information directly from you when:
-
You use our Wix online booking form.
-
You contact us via email, text, iMessage, or WhatsApp.
-
You share information during appointments.
-
You interact with our Facebook or Google Ads content online.
4. How We Use Your Information
We use your information to:
-
Arrange and manage physiotherapy appointments.
-
Assess, plan, and deliver treatments.
-
Keep accurate clinical and administrative records.
-
Communicate with you regarding appointments or treatment.
-
Improve website performance and advertising effectiveness.
-
Comply with professional and legal obligations.
We do not share your data with insurance companies, the NHS, or third parties unless required by law or with your explicit consent.
5. Lawful Basis for Processing
We process your data based on:
-
Consent – you have given permission for us to process your data.
-
Contract – data is necessary to provide our physiotherapy services.
-
Legal obligation – to meet professional or statutory requirements.
-
Legitimate interests – for limited marketing analytics (e.g. Google Ads performance), with cookie consent obtained where applicable.
6. Data Storage and Security
Your personal and treatment records are:
-
Stored on password-protected and encrypted systems.
-
Accessed only by Lydia Heins for clinical purposes.
-
Never shared externally except when legally required.
All documents are securely stored and password protected.
We use Outlook for email correspondence, Wix for bookings, and advertising tools (Facebook and Google Ads) that are GDPR-compliant.
7. Data Retention
Physiotherapy records are retained for at least 8 years after your final appointment (or until age 25 if you are under 18), following professional guidelines. After this period, records are securely deleted or destroyed.
8. Your Rights
You have the right to:
-
Access your personal data.
-
Request corrections or deletion (where legally possible).
-
Withdraw consent for processing.
-
Object to or restrict certain processing activities.
-
File a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been misused.
Visit www.ico.org.uk for more information.
9. Cookies, Analytics & Advertising
Our website (hosted by Wix) may use cookies and analytics tools to enhance user experience and measure marketing performance.
We use Google Ads and Facebook Ads to help potential clients find our services. These tools may collect anonymised data such as:
-
Device type, IP address, and browser information.
-
Website interactions (e.g. pages visited).
-
Referral and engagement statistics.
You can control or disable cookies via your browser settings or opt out of Google Ads tracking via Google’s Ad Settings.
10. Updates to This Policy
This Privacy Policy may be updated periodically to reflect legal or service changes. The most recent version will always be available on our website.
Contact Information
For any questions regarding this Privacy Policy, please contact:
Lydia Heins Physiotherapy
Email: lydiaheinsphysiotherapy@outlook.com
Location: Northern Ireland, UK
Website Disclaimer:
Professional Status:
Lydia Heins Physiotherapy is a qualified, HCPC-registered physiotherapy practice based in Northern Ireland. All in-person care follows HCPC and CSP standards. Website content reflects general professional knowledge but is not a substitute for an individual assessment or treatment plan. Consult a qualified physiotherapist before acting on any exercises or advice.
Accuracy & Liability:
Content is provided “as is” for general information. We accept no liability for any loss, injury, or damage arising from use of the website or linked resources.
External Links:
Links to third-party sites (e.g., Facebook, Google Ads) are for convenience. We are not responsible for their content or privacy practices.
Copyright:
All content (text, images, logos) belongs to Lydia Heins Physiotherapy and may not be reproduced without permission.
Updates:
This disclaimer may be updated periodically. The latest version is always on the website.
