Last updated: 12 October 2026
JHR Physio respects your privacy and takes the protection of your personal information seriously. This policy explains how we collect, use, store and share information when you visit our website, contact us or receive our physiotherapy services.
1. Who we are
JHR Physio provides community physiotherapy and home-visit services. In this policy, “we”, “us” and “our” refer to the operator of JHR Physio, responsible for deciding how your personal information is used.
Email: contact@jhrphysio.com
Telephone: 07875466351
Address: 1 Richard Rd, Rotherham, S60 2QP
Website: https://jhrphysio.com/
Please use these details for privacy enquiries or requests relating to your personal information.
2. Information we collect
The information we collect depends on your interaction with us. It may include:
- Contact and identification details: your name, date of birth, address, telephone number and email address.
- Enquiry and appointment information: messages, booking details and correspondence.
- Health information: relevant medical history, symptoms, assessment findings, treatment notes and rehabilitation plans.
- Supporting contact details: information about a nominated carer, representative or emergency contact.
- Financial information: invoices, payment status and transaction records.
- Website information: technical data such as your IP address, browser type and security logs generated when you use our website.
We aim to collect only information relevant to the purpose for which it is needed.
3. How we collect information
We collect information when you:
- Contact us by telephone, email or through our website.
- Enquire about or book an appointment.
- Complete forms or provide information during assessment and treatment.
- Give feedback or make a complaint.
Where relevant and lawful, we may receive information from healthcare professionals, carers, authorised representatives or insurers involved in your care or its administration.
4. Why we use your information
We use your information to:
- Respond to enquiries and discuss our services.
- Arrange and manage appointments and home visits.
- Assess your needs and provide physiotherapy.
- Develop and review your treatment plan.
- Maintain clinical records and support continuity of care.
- Communicate with you about appointments and treatment.
- Issue invoices and administer payments.
- Investigate complaints and manage legal or insurance matters.
- Meet applicable legal obligations.
- Protect our website, systems and business from misuse.
Where we wish to use your information for an additional purpose, we will explain that purpose and obtain consent where required.
5. Our lawful bases for processing
Under UK data protection law, we must have a lawful basis for using personal information. Depending on the activity, we rely on:
Contract
To take steps at your request before providing services and to deliver services agreed with you.
Legal obligation
To comply with applicable legal requirements, including relevant financial record-keeping obligations.
Legitimate interests
To administer our practice, respond to enquiries, protect our systems and address complaints or claims, where our interests are not overridden by your rights and freedoms.
Consent
Where we specifically ask for permission, such as publishing an identifiable testimonial or carrying out certain marketing activities. You can withdraw this consent by contacting us.
Health information receives additional protection as special category data. Where applicable, we process it for healthcare purposes under Article 9(2)(h) of the UK GDPR and the relevant provisions of the Data Protection Act 2018, subject to professional confidentiality requirements.
Consent to physiotherapy treatment is separate from the lawful basis used to process personal information.
6. Sharing your information
We may share relevant information where necessary and lawful with:
- Clinicians and authorised personnel involved in providing our services.
- Other healthcare professionals involved in your care.
- Providers supporting our website, communications, appointment administration, clinical records or payments.
- Accountants, insurers and professional advisers.
- Regulators, public authorities or other organisations where disclosure is required by law or otherwise lawfully justified.
We consider confidentiality requirements and limit information shared to what is relevant for the purpose. Where providers process information on our behalf, appropriate data protection arrangements are required.
7. Protecting your information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure. Access is restricted to people who need the information to perform their duties.
No website, communication channel or storage system can be guaranteed completely secure. Please avoid sending detailed medical information through general website enquiries. Contact us to discuss an appropriate way to provide sensitive information.
8. How long we keep information
We retain personal information only for as long as necessary for the purpose for which it was collected.
When deciding retention periods, we consider:
- The need to maintain appropriate clinical records and continuity of care.
- Applicable legal, professional and insurance requirements.
- Financial and tax record-keeping obligations.
- Whether information is needed to resolve a complaint, dispute or claim.
- Whether an enquiry has resulted in an ongoing patient relationship.
Different retention requirements may apply to children’s records. Information may also be retained longer where a relevant investigation or legal matter remains ongoing.
When information is no longer required, we securely delete, destroy or anonymise it. You can contact us for information about the retention period applicable to your records.
9. International data transfers
Some technology providers may store or access information outside the UK. Where this occurs, we must ensure that the transfer meets applicable UK data protection requirements.
Depending on the circumstances, this may involve UK adequacy regulations or approved contractual safeguards. Contact us for details of international transfers relevant to your information and how to obtain information about the safeguards used.
10. Cookies and website technologies
Cookies are small files stored on your device. Our website may use cookies or similar technologies to support its functions, remember preferences and maintain security.
Where consent is required for a technology, we will request it before that technology is used. Any optional technologies we use should be explained through the website’s cookie information and preference controls.
You can also manage cookies through your browser settings. Blocking some cookies may affect website functionality.
11. Email, telephone and messaging
When you contact us, we use the information you provide to respond and manage your enquiry or care.
If you choose to contact us through a third-party messaging service, that provider also processes information under its own privacy policy. Avoid sending detailed health information through a channel until we have discussed whether it is appropriate.
12. Marketing and testimonials
If we send promotional communications, we do so in accordance with applicable requirements. You can ask us to stop direct marketing at any time.
We will obtain your permission before publishing an identifiable testimonial, photograph or patient story. Refusing permission will not affect your care. If you later withdraw permission, we will stop future use and remove content from channels we control where applicable.
13. Your data protection rights
Depending on the circumstances, you may have the right to:
- Access your personal information and obtain a copy.
- Correct inaccurate or incomplete information.
- Request deletion of information.
- Restrict how information is used.
- Receive certain information in a portable format.
- Withdraw consent where processing relies on consent.
These rights are subject to legal conditions and exemptions. For example, we may need to retain clinical information even if you request its deletion.
Your right to object
You may object to processing based on legitimate interests for reasons relating to your particular circumstances. You have the right to object to direct marketing at any time.
To exercise your rights, email contact@jhrphysio.com or write to our address above. We may need to verify your identity before responding. Requests are normally handled without charge, subject to applicable legal exceptions.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
14. Information needed to provide care
Certain contact and health information is necessary to arrange appointments, assess your needs and provide appropriate treatment.
If you choose not to provide necessary information, we may be unable to proceed with a service. We will explain what information is needed and why. Information requested for optional purposes, such as marketing, is not a condition of receiving care.
15. Children and representatives
Where we provide services to a child or communicate with a representative, we consider the patient’s rights, understanding and the representative’s authority.
A parent, carer or family member is not automatically entitled to access all patient information. Requests are considered in accordance with applicable law and confidentiality obligations.
16. External links
Our website may link to other websites or services. Their operators are responsible for their own privacy practices. Please read their privacy policies before providing personal information.
17. Complaints
If you have a concern about how we handle your personal information, please contact us:
Email: contact@jhrphysio.com
Telephone: 07875466351
Address: 1 Richard Rd, Rotherham, S60 2QP
You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator.
Website: https://ico.org.uk/make-a-complaint/
You do not have to contact us before making a complaint to the ICO.
18. Changes to this policy
We may update this policy when our services, systems or legal obligations change. The latest version will be published on this page with its revision date. Where required, we will take additional steps to inform you of significant changes.