Privacy Policy

1. Who I am

Adam Sindall-White Physiotherapy ("I", "me", "my") is a sole-trader physiotherapy practice based at 5 Bowling Green, Street, Somerset BA16 0AH. I am the data controller for the personal data described in this policy.

If you have any questions about this policy or want to exercise your data rights, email me at adamsindallwhitephysio@gmail.com or call 07748 157 467.

2. What I collect

• Contact details — name, phone, email and any details you provide when you book an appointment or get in touch with me.
• Appointment details — the time and type of session you book.
• Clinical notes — if you attend an appointment, I will record a clinical history, assessment, and treatment plan as part of my duty of care as a registered physiotherapist.
• Payment records — confirmation that payment was taken (card, cash or bank transfer). I do not store card numbers.
• Website analytics — anonymous, cookie-free page-view counts (Vercel Web Analytics). No cookies are set, no personal profile is built, and visitors are not tracked across other websites.

3. Why I use it

• To book and deliver your appointment (contract).
• To keep the clinical records I am professionally and legally required to keep (legal obligation / legitimate interest in safe care).
• To reply to enquiries you send through the website (legitimate interest).
• To take payment for sessions (contract).

4. Who I share it with

I do not sell your data. I share it only with the following trusted processors, and only as needed to run the practice:

• Cal.com — powers the online booking calendar and takes card payments (via Stripe). See cal.com/privacy.
• Google Maps — the embedded clinic map on the contact section is served by Google. See policies.google.com/privacy.
• Google Fonts — typefaces are served by Google. Google may log your IP address briefly when fonts are requested.
• Vercel — hosts the website and provides anonymous, cookie-free page-view analytics. Basic request logs are kept for security and reliability.

I may also share clinical information with your GP, consultant or insurer with your explicit consent, or where I am legally required to do so (for example, to safeguard a vulnerable person).

5. Cookies & similar technologies

This site uses only the minimum technologies needed to run it:

• A small cookie / localStorage entry to remember that you have dismissed the cookie notice.
• Cookies set by Cal.com when the booking widget loads (to keep your session active while you pick a slot).
• Cookies set by Google Maps when the embedded map loads.

There are no advertising, profiling or analytics cookies on this site.

6. How long I keep it

• Clinical records — at least 8 years after your last appointment, in line with professional record-keeping guidance for physiotherapists.
• Enquiries that don't become appointments — up to 12 months.
• Payment / invoicing records — 6 years, as required by HMRC.

7. Your rights

Under UK GDPR you have the right to:

• Ask for a copy of the personal data I hold about you.
• Ask me to correct anything that's wrong.
• Ask me to delete your data (except where I'm legally required to keep it, such as clinical records).
• Object to how I'm using your data, or ask me to restrict it.
• Withdraw consent at any time where I'm relying on consent.

Email me and I'll respond within one calendar month. If you're unhappy with my response, you can complain to the Information Commissioner's Office.

8. Updates to this policy

I may update this policy from time to time. When I do, I'll change the "Last updated" date at the top. Material changes will be flagged on the site.