Privacy Policy

Joint Venture Physiotherapy(“we”, “us”) is the data controller responsible for your personal information. Our clinic is at Flexspace Bolton (Lythgoe House), Manchester Road, Bolton, Greater Manchester, BL3 2NZ.

You can contact us about this policy or your data by email at Jointventurephysiotherapy@gmail.com or by phone on 07586 605462.

We collect and process the following:

• Enquiry / contact-form data — your name, email address, phone number and any free-text details you choose to share about your condition (which may include health information).
• Booking and appointment data — the details needed to arrange and manage your appointments.
• Clinical records — assessment findings, treatment notes and related health information created during your care.
• Review data — if you leave a review, the content and any name you publish with it.

We use your information to respond to enquiries, arrange and deliver your care, take payment, keep clinical records and meet our professional and legal obligations.

Under the UK GDPR, our lawful bases are Article 6(1)(b) (taking steps to enter into and perform a contract with you) and Article 6(1)(f) (our legitimate interests in running and improving the practice). Because health information is special-category data, we additionally rely on Article 9(2)(h) (provision of health treatment and management of healthcare services) and, where appropriate, your explicit consent under Article 9(2)(a).

We do not sell your data. We share it only with trusted service providers who process it on our behalf, including:

• Carepatron — our booking and practice-management system.
• Web3Forms — processes contact-form submissions and forwards them to us (transfers may involve the United States).
• Google — provides the reviews shown on our site and, in future, website analytics.
• Vercel — hosts our website.
• Your insurer — where you are claiming treatment through private medical insurance.

We may also disclose information where required by law or to protect the vital interests of you or another person.

Some of our providers (for example Web3Forms and Google) may process data outside the UK, including in the United States. Where this happens, we rely on appropriate safeguards such as UK adequacy regulations or the providers' standard contractual clauses to protect your information.

We keep clinical records in line with professional record-keeping standards: for adults, this is normally around eight years after your last appointment. For patients under 18, records are kept until their 25th birthday (or 26th if the last entry was made when they were 17). Enquiry and contact data that does not become part of a clinical record is kept only for as long as needed to deal with your enquiry.

Under the UK GDPR you have the right to access your data; to have inaccurate data corrected; to request erasure; to restrict or object to processing; to data portability; and, where we rely on consent, to withdraw that consent at any time. To exercise any of these rights, contact us at Jointventurephysiotherapy@gmail.com.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk. We'd appreciate the chance to address your concerns first.

Our website currently uses only the cookies necessary for it to function. If we introduce analytics or other non-essential cookies, we will ask for your consent first through a cookie banner and update this policy accordingly.

We use appropriate technical and organisational measures to keep your information secure, including restricted access to records, reputable processors and secure connections to our website. No system is completely secure, but we take reasonable steps to protect your data and to respond to any incident.

We may update this policy from time to time. The current version is always published on this page with the “last updated” date shown above.