Privacy Policy

Effective Date: 07/07/2026

This Privacy Policy describes how PhysioRise (“we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit or use our website, https://physiorise.co.uk/ (the “Site”). It also explains your rights under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

PhysioRise is the data controller responsible for your personal information.

• PhysioRise
• 24a The Tay Building, 2a Wrentham Avenue, NW10 3HA, London
• Email: info@physiorise.co.uk

If you have any questions about this policy or how we handle your data, you can contact us using the details above.

2. Information We Collect

We collect information about you in a few different ways:

A. Information You Directly Provide to Us

We collect personal information you provide when you interact with our Site, such as when you:

• Contact us via our forms or by email (e.g., your name, email address, phone number, and the content of your message).
• Book an appointment through our online booking system.
• Post comments on our blog (e.g., your name and email address).

Please note: our contact form does not ask for details about your health or medical condition. Please do not include sensitive medical information in the message field — we will discuss any clinical details with you directly during your consultation.

B. Information Collected Automatically (Cookies and Tracking)

When you visit our Site, certain information is automatically collected, usually through WordPress features, plugins, and third-party services like Google Analytics. This may include:

• Log Data: Your Internet Protocol (IP) address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits.
• Cookies: Small data files stored on your device that help us improve your experience and understand how the Site is used. You can remove or reject cookies through your browser settings.
• Analytics: Information about your activity on the Site, such as time spent on pages and links clicked.

3. How We Use Your Information and Our Lawful Basis

Under UK GDPR, we must have a lawful basis for processing your personal information. We use your information for the following purposes:

• To respond to your enquiries and provide our services — including sending you an automated confirmation email when you submit an enquiry through our contact form. Lawful basis: taking steps at your request prior to entering into a contract, and our legitimate interest in responding to people who contact us.
• To provide, maintain, and improve our Site and services. Lawful basis: our legitimate interests in operating and improving our Site.
• To send technical notices, updates, security alerts, and administrative messages. Lawful basis: our legitimate interests, or compliance with a legal obligation.
• To monitor and analyse trends, usage, and activity in connection with our Site. Lawful basis: your consent (for non-essential analytics cookies), or our legitimate interests.
• To detect, investigate, and prevent fraudulent or illegal activity. Lawful basis: our legitimate interests and compliance with legal obligations.

Where we rely on consent (for example, for certain cookies or any marketing communications), you have the right to withdraw that consent at any time.

4. How We Share Your Information

We do not sell your personal information. We may share it in the following limited situations:

• Email delivery (Brevo): We use Brevo (a Sendinblue company) as our email-sending provider (SMTP). When we send you an email — such as a confirmation of your enquiry — your name and email address pass through Brevo solely so that the email can be delivered on our behalf. Brevo acts as our data processor and processes this data under our instructions.
• Online booking (Nookal): Appointment bookings are handled through Nookal, a practice-management and booking provider. When you book an appointment, the information you enter is processed by Nookal on our behalf to manage your booking.
• Website hosting and analytics: We use third-party providers for website hosting and for analytics (such as Google Analytics) to operate and understand the use of our Site.
• Compliance with laws: We may disclose your information where required by any applicable law, regulation, or legal process.
• Business transfers: In connection with any merger, sale of assets, financing, or acquisition of all or part of our business.
• With your consent: We may share your information with your consent or at your direction.

Some of these providers may process data outside the United Kingdom. Where that happens, we take steps to ensure appropriate safeguards are in place, as required by UK data protection law.

5. WordPress Comments

When visitors leave comments on the site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string, to help with spam detection.

If you leave a comment, the comment and its metadata are retained indefinitely so that we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

6. Data Retention

We keep your personal information only for as long as necessary for the purposes described in this policy.

• Enquiry data (the name and contact details you submit through our contact form or by email) is retained for 24 months. If you do not become a patient within that period, we delete this enquiry data.
• Clinical and patient records are kept separately and retained in line with healthcare record-keeping requirements.
• Blog comment data is retained as described in Section 5.

7. Your Rights

Under UK data protection law, you have the following rights over your personal information:

• Access — the right to request a copy of the personal data we hold about you.
• Rectification — the right to have inaccurate or incomplete data corrected.
• Erasure — the right to ask us to delete your personal data in certain circumstances.
• Restriction — the right to ask us to restrict processing of your data in certain circumstances.
• Objection — the right to object to processing based on our legitimate interests.
• Portability — the right to receive your data in a portable format in certain circumstances.
• Withdraw consent — where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, contact us at info@physiorise.co.uk. We will respond in line with our legal obligations.

8. Your Choices

• Cookies: Most browsers accept cookies by default. You can set your browser to remove or reject cookies, though this may affect the functionality of our Site.
• Promotional communications: If we send any promotional emails, you can opt out by following the instructions in those emails. We may still send you non-promotional messages relating to your enquiry or our services.

9. Security

We take reasonable measures to help protect your personal information from loss, theft, misuse, and unauthorised access, disclosure, alteration, and destruction. However, no security system is impenetrable, and we cannot guarantee the security of our systems entirely.

10. Complaints

If you have concerns about how we handle your personal information, please contact us first at info@physiorise.co.uk so we can try to resolve them.

You also have the right to complain to the Information Commissioner’s Office (ico.org.uk)

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make changes, we will revise the “Effective Date” at the top of this policy and, where appropriate, provide additional notice. We encourage you to review this policy periodically to stay informed about our information practices.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

PhysioRise info@physiorise.co.uk 24a The Tay Building, 2a Wrentham Avenue, NW10 3HA, London