Legal Disclaimer
The information contained in this website is for general information purposes only. The information is provided by North London Neuro Physio and while we endeavour to keep the information up to date and correct, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to the website or the information, products, services, or related graphics contained on the website for any purpose. Any reliance you place on such information is therefore strictly at your own risk.
In no event will we be liable for any loss or damage including without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever arising from loss of data or profits arising out of, or in connection with, the use of this website. Through this website you are able to link to other websites which are not under the control of North London Neuro Physio. We have no control over the nature, content and availability of those sites. The inclusion of any links does not necessarily imply a recommendation or endorse the views expressed within them.
Every effort is made to keep the website up and running smoothly. However, North London Neuro Physio takes no responsibility for, and will not be liable for, the website being temporarily unavailable due to technical issues beyond our control.
North London Neuro Physio privacy policy
North London Neuro Physio (hereafter NLNP) takes its data protection obligations seriously and is committed to the highest professional and ethical standards. We only collect data that is relevant to your treatment and necessary for us to deliver safe, high-quality care.
This policy explains when and why we collect your personal information, how we use it, the limited circumstances in which we may share it, and how we keep it secure.
We ensure that all members of the team take appropriate steps to protect the personal data they hold against loss, misuse or unauthorised access.
NLNP is a neuro-physiotherapy practice providing specialist treatment to a wide range of individuals. Our office is based at:
22a Beckwith Road, London SE24 9LG
Office telephone: 020 7737 2612
This privacy policy sets out how we process personal information in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
NLNP has appointed Joanne Tuckey as our Data Protection Officer (DPO). If you have any questions or requests regarding your personal information, you can contact Jo at the postal address above or at jo@northlondonneurophysio.com.
1. Collection of your personal information
We collect essential contact details (name, date of birth, address, email and telephone numbers) as well as relevant clinical information, including:
- Past and current medical history
- Medications
- Details of your GP and consultants
- Assessment findings and treatment records
- Information about your goals and progress
- Relevant clinical information received from other healthcare professionals involved in your care
We process this data because it is in our legitimate interests as clinicians to do so and because it is necessary for the provision of safe and effective healthcare.
Safeguarding-related information
On rare occasions, we may also record or process information relating to safeguarding concerns, in line with:
- The Chartered Society of Physiotherapy (CSP) safeguarding guidance
- The HCPC Standards of Conduct, Performance and Ethics (including the duty to report concerns about safety and wellbeing)
- Local Safeguarding Adults Board (SAB) and Local Safeguarding Children Partnership (LSCP) procedures
This may include information relevant to the safety or wellbeing of you, a child, or another vulnerable adult.
We may process safeguarding information under the lawful bases of vital interests, public task, or legitimate interests, depending on the circumstances.
2. How we use your information
We use your information to provide safe, appropriate and effective physiotherapy care. This includes contacting you, arranging appointments, keeping clinical records and issuing invoices.
Where relevant and with your consent, we may liaise with other healthcare professionals involved in your treatment, such as your GP, hospital consultants, orthotists, or members of a wider multidisciplinary team.
Safeguarding
If we believe that a child or adult is at risk of harm, abuse or neglect, we may need to share information without your consent, in line with:
- Our legal responsibilities
- HCPC Standard 7 (report concerns appropriately)
- CSP safeguarding best practice
- Local safeguarding board/partnership procedures
Information will only be shared with appropriate bodies — such as social services, the police, your GP, or local safeguarding teams — and only the minimum necessary information will be disclosed.
Where possible and safe, we will inform you before sharing information; however, if doing so could increase the risk of harm, we may not inform you in advance.
3. Your rights
You have the following rights in relation to your personal data:
- The right to be informed about how your information is used
- The right to access the personal information we hold about you
- The right to rectification of inaccurate or incomplete data
- The right to request erasure (‘the right to be forgotten’)
- The right to restrict processing
- The right to object to processing carried out under legitimate interests
These rights may be limited in certain safeguarding or legal circumstances where disclosure could put someone at risk.
4. Storage, processing and retention
Your personal data is stored securely and electronically using encrypted systems with restricted, password-protected access.
We retain your information only for as long as is necessary and in accordance withlegal, professional and regulatory requirements.
Retention periods
- Clinical records: 8 years after your last treatment session
- Children’s records: until the child reaches 21 years of age
- Administrative data (including records required for HMRC): up to 6 years
- Personal data relating to associates no longer working with NLNP: up to 6 years
5. How and when we share your personal information
We share personal data internally only on a strict need-to-know basis.
Emails are encrypted and we avoid including identifiable patient details in subject lines.
We may share information with other healthcare professionals involved in your care (with consent), or with external organisations such as insurers, the police, or fraud prevention bodies when legally required.
Safeguarding
Where there are concerns about the immediate or significant risk of harm to a child or adult, we may share relevant information with safeguarding authorities without consent, in line with CSP, HCPC and local safeguarding guidance.
We will always document such decisions carefully.
6. Other personal data
We may process personal data necessary to run our business operations, including:
- Invoices and receipts
- Accounts and tax returns
- Personal and financial details of associates
7. Subject access requests
You may request access to the information we hold about you. Requests must be made in writing.
We may ask for additional identification to ensure your data is provided safely.
The DPO will respond within one month. This may be extended by a further two months for complex requests, in which case you will be informed.
8. Communication preferences
You may choose how we contact you. We will only send communications necessary for your treatment or your account. Contact preferences can be changed at any time by contacting the DPO.
9. Cookies
A ‘cookie’ is a small text file containing information that a web site transfers to your computer’s shared disk for record keeping purposes. A cookie cannot give us access to your computer or to your personal information. Most web browsers automatically accept cookies; consult your browser’s manual or online help if you want information on restricting or disabling the browser’s handling of cookies. If you disable cookies, you can still view the information on our website.
10. ICO complaints
If you have concerns about how your data has been processed, please contact the DPO. You may also contact the Information Commissioner’s Office (ICO) for further support.
11. Privacy policy updates
This policy may be updated periodically. The most recent version will always be available on our website.
12. Data breaches
NLNP will report any personal data breach promptly and manage it in line with GDPR requirements. Where there is risk to individuals, breaches will be reported to the ICO within 72 hours and to affected individuals where necessary.
13. Security policy
We maintain appropriate physical, organisational and technical measures to protect personal data, including:
- Encrypted electronic data
- Controlled access on a need-to-know basis
- Password-protected devices
- Secure shredding
- Secure disposal of electronic equipment
- Antivirus and anti-spyware tools
The DPO has the necessary authority and resources to fulfil her responsibilities.
