Privacy Policy

1. Who We Are

Naveen Physiotherapist is operated by Naveen Ramakrishnan, a chartered physiotherapist registered with the Health and Care Professions Council (HCPC) and a member of the Chartered Society of Physiotherapy (CSP). We are committed to protecting your privacy and handling your personal data responsibly.

2. What Data We Collect

We may collect the following personal data:

• Name, email address, phone number, and postal address
• Medical history and health information relevant to your treatment
• Appointment and booking details
• Payment information (processed securely by third-party providers)
• Website usage data via privacy-friendly analytics (Plausible Analytics)

3. How We Use Your Data

We use your personal data to:

• Provide physiotherapy assessment and treatment
• Manage your appointments and booking requests
• Communicate with you about your care
• Send appointment reminders and follow-up communications
• Comply with our legal and regulatory obligations
• Improve our website and services

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you book an appointment or submit a contact form
• Legitimate interest: To provide and improve our services
• Legal obligation: To comply with healthcare regulations and HCPC requirements
• Vital interest: In circumstances where your health data is necessary for your care

5. Data Storage & Security

Your data is stored securely using industry-standard encryption. We use Supabase for secure data storage, which provides enterprise-grade security with data encrypted at rest and in transit. We retain clinical records for a minimum of 8 years in line with CSP and HCPC guidance.

6. Third-Party Services

We use the following third-party services:

• Supabase: Secure data storage and authentication
• Vercel: Website hosting
• Plausible Analytics: Privacy-friendly website analytics (no cookies, no personal data)
• Resend: Transactional email delivery

7. Cookies

We use only essential cookies required for the website to function (such as authentication session cookies). We use Plausible Analytics, which does not use cookies or collect personal data. We do not use any tracking or advertising cookies.

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data (subject to legal retention requirements)
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us at hello@naveenphysio.uk.

9. Contact

If you have any questions about this privacy policy or how we handle your data, please contact:

Naveen Ramakrishnan
Email: hello@naveenphysio.uk

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.