Privacy Policy

Conor Sheehan Physiotherapy
Effective Date: 30/07/2025

1. Introduction

This Privacy Policy outlines how Conor Sheehan Physiotherapy collects, stores, and processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services or submitting information through our website or forms, you agree to the terms of this policy.

2. Who We Are

Data Controller: Conor Sheehan
Clinic Name: Conor Sheehan Physiotherapy
Business Address: Gauntlet Fight Academy, 1A Haven Green, Broadway, W5 2UU
Email: sheehanconor324@gmail.com

3. What Information We Collect

We may collect and process the following personal and health-related information:

  • Full name

  • Email address and phone number

  • Appointment details

  • Reason for treatment / symptoms

  • Medical history or relevant health information submitted through intake forms

  • Consent to treatment

  • Information shared during physiotherapy sessions, including clinical observations, assessments, and treatment responses

  • SOAP notes (clinical treatment records) created from these sessions

We collect this information when you:

  • Book an appointment through our website (Squarespace Scheduling)

  • Complete a pre-screening or intake form

  • Attend a physiotherapy, massage, tapping or strength and conditioning session

  • Contact us directly

4. Why We Collect This Data

We collect your information to:

  • Deliver physiotherapy and related services (e.g., massage, taping, strength & conditioning)

  • Tailor treatments to your needs

  • Maintain accurate clinical records

  • Communicate with you regarding your appointments

  • Comply with our legal and professional obligations

5. How Your Data Is Stored

Your data is securely stored through:

  • Squarespace Scheduling, which manages appointment bookings and integrated intake forms

  • WriteUpp, used for storing clinical notes and treatment records (e.g., SOAP notes)

  • Access is restricted to the practitioner (Conor Sheehan) and protected by secure logins

We do not store health information on unsecured platforms or devices.

6. Lawful Basis for Processing

We process your data under the following lawful bases:

  • Consent – You provide explicit consent via our intake forms

  • Contract – To provide physiotherapy services

  • Legal obligation – To maintain records required under healthcare regulation

7. Data Retention

Your personal and health information will be retained for a minimum of 8 years after your last appointment, in accordance with UK professional healthcare standards. After this period, it will be securely deleted.

8. Data Sharing

We do not share your personal or health data with any third parties unless:

  • You provide explicit written consent, or

  • We are required to do so by law (e.g., safeguarding concerns, court order)

9. Your Rights Under UK GDPR

You have the right to:

  • Access the data we hold about you

  • Request correction of inaccurate information

  • Request deletion of your data (where legally permissible)

  • Withdraw your consent at any time

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of your rights, please contact:
📧 sheehanconor324@gmail.com

10. Contact

If you have questions about this Privacy Policy or how your data is used, please contact:

Conor Sheehan
Conor Sheehan Physiotherapy
📧 sheehanconor324@gmail.com
📍 Gauntlet Fight Academy, 1A Haven Green, Broadway, W5 2UU

11. Policy Updates

This policy may be updated from time to time. The most recent version will always be available on our website.