KMDPhysio is committed to protecting your privacy and handling your personal information with transparency, professionalism, and care. This policy explains what information is collected, why it is collected, how it is used, and the rights you have regarding your data.

1. Who We Are

Human, Horse & Hound Physiotherapy Owner & Lead Physiotherapist: Katy Duncanson Regulated by the Health & Care Professions Council (HCPC) ICO Registration: Active Contact: [kduncansonphysio@gmail.com/07581095813]

2. Information We Collect

We collect and store information necessary for safe, effective physiotherapy treatment and business administration, including:

  • Personal details: name, address, contact information

  • Emergency contact details

  • GP or veterinary surgeon details

  • Medical, veterinary, and rehabilitation history

  • Assessment findings, treatment notes, and exercise plans

  • Payment and invoicing information

  • Website or booking system data (e.g., enquiries, forms, cookies if applicable)

For animal clients, we also collect owner details and veterinary consent as required by law.

3. How Your Information Is Used

Your information is used to:

  • Provide safe, evidence‑based physiotherapy treatment

  • Communicate regarding appointments, progress, and care plans

  • Liaise with your GP, consultant, or veterinary surgeon when appropriate

  • Maintain accurate clinical records in line with HCPC, CSP, and ACPAT standards

  • Process payments and manage accounts

  • Meet legal, regulatory, and insurance requirements

We never sell or share your data for marketing purposes.

4. Lawful Basis for Processing

We process your data under:

  • Consent – for communication and veterinary referral

  • Legal obligation – compliance with HCPC, CSP, ACPAT, and animal welfare legislation

  • Vital interests – where emergency contact or safeguarding is required

  • Legitimate interest – maintaining clinical records and providing professional services

5. Data Storage & Security

  • Records are stored securely in encrypted digital systems compliant with GDPR and ICO requirements.

  • Only authorised personnel (currently the business owner) can access your data.

  • Records are retained for the legally required period:

    • Human physiotherapy: typically 8 years (or until age 25 for children)

    • Veterinary physiotherapy: minimum 7 years

  • After this period, data is securely destroyed.

6. Sharing Your Information

We only share information when necessary for your care or when legally required, including:

  • Your GP, consultant, or veterinary surgeon

  • Insurance companies (with your consent)

  • Regulatory bodies if legally mandated

We do not share information with third parties for advertising or non‑clinical purposes.

7. Your Rights

You have the right to:

  • Access your records

  • Request corrections

  • Request deletion (where legally appropriate)

  • Withdraw consent

  • Restrict or object to processing

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

8. Cookies & Website Analytics

(Include this section if your website uses cookies, analytics, or embedded booking systems.)

Your website may collect anonymised usage data to improve functionality. You can manage cookie preferences through your browser settings.

9. Contact

For questions or data requests, contact: kduncansonphysio@gmail.com

07581095813