Privacy Statement

 Privacy Statement

County Physio Ltd (trading as County Physio) is committed to protecting your personal information and this Policy relates to our use of your personal information collected from you either in person, by telephone, letter, email, SMS or use of our online booking system. Personal information in this context, means any information by which you may be identified.


Your consultations with us are treated as confidential under the terms of the General Data Protection Regulations (GDPR) 2018. We are registered with the Information Commissioner’s Office as a Data Processor.


We collect and process data because we have a legal and professional obligation to do so and it must be adequate, relevant and limited to what is necessary to allow us to treat you properly, professionally, effectively and safely.


As part of our treatment of you, we are required by law to make a record of your care with us (Physiotherapy records). You have a right, by written request, to see these records if you wish within 30 days at no charge, and to ask us to rectify or update any incorrect information if necessary.


We are required to store your records for a legally determined period after your treatment with us has finished. Generally, adult records will be stored for 8 years, and children’s (persons under 18 years of age) records will be stored until they are 25 (or 26 years old if seen at age of 17). Records may be stored for longer for other patient groups. Once the retention period has expired, the physiotherapy records will be securely and permanently destroyed.


We may need to share some of the information you give us, or that we find through examination, with other health professionals in order to give you the best-available advice and treatment. We do not need your written permission to do this, but we will always seek to ensure that you are aware of the communication we have with other health professionals. You have the right to prevent us sharing information. If you expressly forbid us from sharing information with other health professionals directly involved in your care, then it may prevent us from giving you the most appropriate care, and in extreme cases may mean we cannot treat you.


We may email you if you have given consent, regarding your physiotherapy treatment, appointments, relevant information to your case and to provide exercise programmes.


We do not share your information with third parties who are involved in your care (such as solicitors, other health and medical professionals, insurers or employers) without obtaining your written permission beforehand. We will tell you who is asking for the information, what they are asking for, and what they need the information for. You can choose whether you give us written permission. If you do not give your permission, then it may prevent us from helping others to assist you, and in extreme cases may mean we cannot treat you.


Some basic information will be retained solely for business purposes to ensure effective and safe working of the clinic and for analytical and quality feedback purposes. This information will be stored under encryption and will not be shared with any third party at any time. We will never pass on your information for commercial purposes.


County Physio will only store relevant information which enables us to provide a high standard of service and care and which is necessary as part of our duty of care to you. We record and store:


– Your name, gender, date of birth, address, email address (if you give permission) and GP name and address

– The problem you attend with

– The dates you attend for assessment and treatment

– Assessment, diagnosis, plan of care, treatment and outcomes of treatment

– Discharge letter to GP (if you give permission)


We can assure you that all reasonable and appropriate steps are taken to ensure confidentiality and privacy of all data as far as possible. In the extremely unlikely event of any known data breach, you and the Information Commissioner’s Office (ICO) will be informed within 72 hours if there is a high risk of any breach of rights and freedoms of individuals.


County Physio requires you to sign that you have read and understand the Privacy Policy and as your agreement to County Physio storing and processing information in line with GDPR. Your consent is needed in order to allow us to provide treatment.




County Physio is the trading name of County Physio Ltd. Registered address: 14 Church Street, Haddington EH41 3EX

Registered in Scotland. Company registration number: SC454799