Legal

Privacy notice.

What we collect when you book, why we need it, how long we keep it and your rights under UK GDPR.

Who we are

Lily Physiotherapy is the data controller for information collected through this website. Contact: hello@lilyphysiotherapy.co.uk.

What we collect when you book

Your name, email address, optional phone number, the area you would like help with, an optional short message, your chosen appointment time, and the IP address used to make the booking (for fraud and abuse prevention).

Why we process it

  • To manage your appointment, send confirmations, reminders and cancellations (contract).
  • To keep clinical records of your care, which is a legal obligation for registered healthcare professionals.
  • To protect the booking system from abuse (legitimate interest).

Clinical information

Detailed medical history is collected during your consultation and held in secure clinical records, not in the website booking system. Clinical records are retained for the period required by professional guidance (currently eight years for adults).

Who we share it with

Only providers needed to deliver the service: our hosting provider, email delivery provider and encrypted video platform. We never sell data. We share clinical information with other healthcare professionals only with your consent or where the law requires it.

Cookies

The website uses a strictly necessary session cookie for the admin area and a preference cookie to remember your cookie choice. Analytics cookies are only set if you choose "Allow analytics".

Your rights

You can ask for a copy of your data, correction, deletion (where not overridden by record-keeping obligations), or restriction of processing. Email hello@lilyphysiotherapy.co.uk. You may also complain to the Information Commissioner's Office at ico.org.uk.

Ready when you are

Start moving forward.

Book a one-to-one online assessment. If remote physiotherapy is not clinically appropriate, you will be told clearly and directed towards a safer next step.