Last updated: 1 September 2026

JMS Physiotherapy respects your privacy and is committed to protecting your personal information.

This policy explains what information we collect, why we use it, who we may share it with and the rights you have under UK data protection law.

​

1. Who we are

JMS Physiotherapy provides private physiotherapy, rehabilitation and women’s health services from:

London Road Clinic
56 London Road
Milborne Port
DT9 5DW

For the purposes of UK data protection law, JMS Physiotherapy is the data controller responsible for your personal information.

You can contact us about this policy or how we use your information at:

Email: jessy@jmsphysio.co.uk
Telephone: 07500 959679

​

2. Information we may collect

Depending on how you contact us and the services you use, we may collect:

Your name, date of birth and contact details
Appointment and booking information
Information you submit through our website, contact form, email or telephone
Health information, symptoms, medical history, medication, treatment notes and rehabilitation plans
Information about pregnancy, postnatal recovery or pelvic health where relevant to your treatment
Details provided by a GP, consultant, insurer, referrer or other healthcare professional
Payment and transaction information
Records of consent, correspondence, feedback or complaints
Technical website information, including your IP address, browser, device and cookie preferences

Health information is classed as special category personal data and receives additional protection under data protection law.

Please avoid including unnecessary medical information in the general website contact form. More detailed health information can be discussed securely when arranging or attending your appointment.

​

3. How we use your information

We may use your information to:

Respond to enquiries
Assess whether our services are appropriate for you
Arrange, confirm, change or cancel appointments
Provide physiotherapy assessment, treatment and rehabilitation
Maintain accurate clinical records
Communicate with you about your care
Process payments and maintain financial records
Liaise with healthcare professionals, insurers or referrers where appropriate
Manage complaints, legal claims and professional obligations
Protect the security and operation of our website
Improve our services and website
Send optional marketing communications where you have agreed to receive them

We do not sell your personal information.

​

4. Our lawful bases

We rely on one or more of the following lawful bases when using your personal information:

Contract, where processing is necessary to arrange or provide services you have requested
Legal obligation, where we must retain or disclose information to comply with the law
Legitimate interests, where processing is necessary to operate and protect the practice, manage enquiries, maintain records or improve our services
Consent, where you have actively agreed to optional marketing or non-essential cookies
Vital interests, in exceptional circumstances where processing is necessary to protect someone’s life

Where we process health information to provide physiotherapy or healthcare services, we normally rely on Article 9(2)(h) of the UK GDPR, which permits processing for health or social care by a professional subject to confidentiality obligations.

Where we rely on consent, you can withdraw it at any time. Withdrawal will not affect processing that took place before consent was withdrawn.

​

5. If you do not provide information

You are not normally required to provide personal information simply to browse our website.

However, we may be unable to respond to an enquiry, arrange an appointment or provide safe and appropriate treatment if you do not provide information that is reasonably required for those purposes.

​

6. Who we may share information with

Where necessary and lawful, we may share relevant information with:

Healthcare professionals involved in your care
Your GP, consultant or referrer
An insurer or funding provider, where you have requested or authorised this
Website hosting, booking, payment, email and IT service providers
Accountants, legal advisers and professional indemnity insurers
Professional, regulatory or statutory bodies
Emergency services, safeguarding authorities or law enforcement agencies where disclosure is required or necessary to protect someone from serious harm

Our website is hosted on Wix, which also provides website forms and booking functionality. Payment providers may process your payment information directly. JMS Physiotherapy does not normally receive or store your complete card details.

We require service providers handling personal information on our behalf to protect it and only use it for the agreed purpose.

​

7. International transfers

Some website, booking, payment or technology providers may process information outside the UK.

Where this happens, we take reasonable steps to ensure appropriate safeguards are in place. These may include UK adequacy regulations, approved contractual safeguards or another lawful transfer mechanism.

​

8. How long we keep information

We only retain information for as long as it is reasonably required.

Clinical records are normally retained in accordance with applicable legal and professional guidance:

Adult clinical records are generally kept for eight years from the date of the last treatment
Records relating to children and young people may be retained until at least their 25th birthday, or longer where professional guidance requires it
Financial and transaction records may be retained for up to six years
Enquiry information that does not lead to treatment will normally be deleted when it is no longer required for the enquiry or related administration

Information may be retained for longer where required by law or where necessary in connection with a complaint, safeguarding matter or legal claim.

​

9. Cookies and website analytics

Our website uses cookies and similar technologies.

Some cookies are essential for the website, contact forms, security and booking features to work. Other cookies, such as analytics or marketing cookies, should only be used with your permission.

You can accept, reject or manage non-essential cookies through the cookie controls displayed on the website. You can also control cookies through your browser settings, although disabling essential cookies may affect how the website works.

​

10. How we protect your information

We use reasonable technical and organisational safeguards to protect personal information against loss, unauthorised access, alteration or disclosure.

These measures include access controls, secure systems, password protection and the careful selection of service providers. However, no website or electronic communication system can be guaranteed to be completely secure.

​

11. Your data protection rights

Depending on the circumstances, you may have the right to:

Ask for a copy of your personal information
Ask us to correct inaccurate or incomplete information
Ask us to delete information
Ask us to restrict how information is used
Object to certain uses of your information
Receive certain information in a portable format
Withdraw consent where processing is based on consent

These rights are not absolute. For example, we may need to retain clinical records to comply with professional, legal or insurance requirements.

To exercise a right, contact jessy@jmsphysio.co.uk. We may need to verify your identity before completing your request.

​

12. Complaints

Please contact us first if you have concerns about how your information has been handled. We will try to resolve the matter promptly.

You also have the right to complain to the Information Commissioner’s Office:

Website: www.ico.org.uk
Telephone: 0303 123 1113

​

13. Third-party websites

Our website may contain links to external websites. JMS Physiotherapy is not responsible for the privacy practices, security or content of websites operated by other organisations.

​

14. Changes to this policy

We may update this policy when our services, systems or legal responsibilities change. The latest version will be published on this page with the revised date.