Putting 🤍 into Neuro Physiotherapy

Privacy Policy

Effective Date: 30 June 2026

Neuro Herts Rehabilitation LLP ("Neuro Herts", "we", "our" or "us") is committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.

This Privacy Notice explains how we collect, use, store and protect your personal information when you:

• visit our website;
• contact us with an enquiry;
• receive assessment or treatment from us;
• work with us as a referrer or professional      contact.

This Privacy Notice complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and current guidance published by the Information Commissioner's Office (ICO).

Who is responsible for your information?

Neuro Herts Rehabilitation LLP is the Data Controller for the personal information we collect.

Address:
95 Grove Road
Hitchin
Hertfordshire
SG5 1SQ

Email: coralie@neuroherts.co.ukor lindsay@neuroherts.co.uk

If you have any questions about this Privacy Notice or how your information is handled, please contact us using the details above.

What information we collect

Depending on the services you receive, we may collect:

• your name, address, email address and      telephone number;
• date of birth;
• NHS number (where relevant);
• GP and consultant details;
• next of kin or emergency contact details;
• medical history;
• assessment findings;
• treatment records and clinical notes;
• information relating to your rehabilitation;
• appointment history;
• payment and invoicing information;
• correspondence between you and Neuro Herts;
• information provided by other healthcare      professionals, insurers, solicitors or case managers where appropriate.

When you visit our website we may also collect technical information such as:

• IP address;
• browser type;
• pages visited;
• website usage statistics through cookies where      you have provided consent.

How we collect your information

We collect information:

• directly from you;
• when you contact us through our website, email      or telephone;
• during assessments and treatment;
• from healthcare professionals involved in your      care;
• from insurers, solicitors or case managers      where appropriate;
• from family members or carers where      appropriate and with your permission where required.

Why we use your information

We use your personal information to:

• provide physiotherapy and rehabilitation      services;
• maintain accurate clinical records;
• arrange appointments;
• communicate with you or any family/carers      regarding your care plan;
• liaise with other professionals involved in      your treatment;
• process payments and invoices;
• comply with legal and professional      obligations;
• improve our services;
• respond to enquiries;
• send marketing information only where you have      consented or where permitted by law.

Our lawful basis for processing

Under UK GDPR we rely on the following lawful bases:

Providing treatment

Article 6(1)(b) – Performance of a contract.

Managing healthcare records

Article 6(1)(c) – Legal obligation.

Article 6(1)(f) – Legitimate interests in providing safe, effective healthcare.

Processing health information

Health information is classed as Special Category Data.

We process this information under:

Article 9(2)(h) UK GDPR – Provision of health or social care or treatment.

This is supported by Schedule 1 Part 1 of the Data Protection Act 2018.

Marketing

Where required, we will only send marketing communications where you have provided consent or where permitted under applicable electronic marketing laws.

You can withdraw your consent at any time by contacting us.

Who we share your information with

We only share your information where necessary and appropriate.

This may include:

• your GP;
• consultants and other healthcare      professionals;
• Carers or family that you have consented to      being involved in your care;
• NHS services;
• insurers;
• solicitors;
• case managers;
• payment providers;
• accountants;
• secure clinical record providers;
• IT support providers;
• regulatory bodies where required by law.

We will never sell your personal information.

Keeping your information secure

We take appropriate technical and organisational measures to protect your personal information.

These include:

• encrypted and password-protected systems;
• secure cloud-based clinical record systems;
• multi-factor authentication;
• secure electronic backups;
• restricted staff access;
• confidentiality agreements;
• locked storage for any paper records.

Although we take every reasonable precaution, no method of electronic transmission can be guaranteed to be completely secure.

How long we keep your information

We retain records in accordance with professional guidance, legal obligations and our insurers' requirements.

Typically:

• Adult clinical records are retained for 7      years after the end of treatment.
• Children's records are retained until the      patient's 25th birthday, or longer where required by law.

Financial records are retained in accordance with HMRC requirements.

When information is no longer required it is securely destroyed or permanently deleted.

Cookies

Our website uses cookies to help improve your browsing experience.

Where cookies are not essential to the operation of the website, they will only be placed on your device after you have provided your consent through our cookie banner.

You may change or withdraw your cookie preferences at any time through your browser settings or our cookie management tool.

Further information about the cookies used on our website is available in our Cookie Policy.

International transfers

Most of your personal information is stored within the United Kingdom.

Where we use trusted service providers who process information outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR.

Your rights

Under UK GDPR you have the right to:

• request access to your personal information;
• request correction of inaccurate information;
• request erasure of your information where      applicable;
• request restriction of processing;
• object to certain types of processing;
• request transfer of your information where      applicable;
• withdraw consent where processing is based on      consent.

Please note that some of these rights may be limited where we are legally required to retain healthcare records.

To exercise any of these rights, please contact us using the details above.

Complaints

If you are unhappy with how we have handled your information, please contact us in the first instance so we can try to resolve your concerns.

If you remain dissatisfied, you have the right to complain to the Information Commissioner's Office (ICO).

Information about making a complaint is available at:

https://ico.org.uk/make-a-complaint/

Third-party websites

Our website may contain links to other websites.

We are not responsible for the privacy practices or content of third-party websites. We encourage you to read their privacy notices before providing any personal information.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in legislation, professional guidance or our services.

The latest version will always be published on our website together with the date of the most recent update.