Privacy Policy

Last updated: April 2025

1. Who We Are

Elite Joint Solutions is a private physiotherapy and injection therapy clinic based in South Gloucestershire, serving patients in Yate, Iron Acton, Bristol, and the surrounding area. The clinic is operated by Daniel Taylor.

We are committed to protecting your personal data and handling it responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, Elite Joint Solutions is the data controller in respect of the personal information you provide to us.

Contact: www.elitejointsolutions.com | South Gloucestershire, UK

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Contact and Identity Information

Full name
Email address
Telephone number
Postal address

Health and Clinical Information

As a healthcare provider, we collect special category data (health data) where you engage with our clinical services, including:

Details of your symptoms, medical history, and presenting complaint
Information about existing conditions, medications, and allergies
Clinical assessment notes, treatment records, and outcomes
Referral letters or reports from other healthcare professionals

Booking and Administrative Information

Appointment requests and booking details
Payment and billing information (processed securely via third-party providers)
Communication history (e.g. emails or messages you send us)

Website Usage Data

IP address and browser type
Pages visited and time spent on the site
Referring website or search query
Cookie and tracking data (see Section 8)

3. How We Use Your Personal Data

We use your personal data for the following purposes:

To provide physiotherapy assessments, treatment, and injection therapy services
To manage and confirm appointments
To communicate with you about your care, including follow-up and aftercare advice
To process payments for services rendered
To respond to enquiries submitted via our website or telephone
To maintain accurate clinical records in line with professional obligations
To improve our website and understand how visitors use it
To comply with legal and regulatory requirements

4. Our Legal Basis for Processing

We process your personal data under the following legal bases:

Contractual necessity: to deliver the physiotherapy and injection therapy services you have requested.
Legitimate interests: to manage our business, respond to enquiries, and improve our services, where these interests are not overridden by your rights.
Legal obligation: to comply with professional healthcare regulations and record-keeping requirements.
Consent: for marketing communications (where applicable) or where you have explicitly agreed to a specific use of your data.
Vital interests or provision of healthcare: for special category health data processed in the course of providing clinical services.

5. Who We Share Your Data With

We do not sell your personal data. We may share it in the following limited circumstances:

Other healthcare professionals: with your consent, we may share clinical information with your GP, consultant, or other treating practitioners.
Third-party service providers: including our website platform (Wix), booking system, and payment processor, who process data on our behalf and are bound by data processing agreements.
Legal or regulatory bodies: where we are required to do so by law, court order, or regulatory authority.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law or professional guidelines.

Clinical records: retained for a minimum of 8 years from the date of last treatment (or until age 25 for patients who were minors at the time of treatment), in line with NHS and professional guidance.
Contact and enquiry data: retained for up to 2 years, unless a clinical relationship is established.
Financial records: retained for 7 years in accordance with HMRC requirements.

7. Your Data Protection Rights

Under UK GDPR, you have the following rights:

Right of access: to request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification: to request that we correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data where it is no longer needed, subject to our legal and professional obligations.
Right to restrict processing: to ask us to limit how we use your data in certain circumstances.
Right to data portability: to receive your data in a structured, machine-readable format where applicable.
Right to object: to object to processing based on legitimate interests or for direct marketing.
Rights related to automated decision-making: we do not use automated decision-making or profiling in a way that significantly affects you.

To exercise any of these rights, please contact us using the details in Section 10. We will respond within one month of receiving your request.

8. Cookies and Website Tracking

Our website uses cookies — small text files stored on your device — to help the site function and to understand how it is used. We use the following types of cookies:

Essential cookies: necessary for the website to operate correctly. These cannot be disabled.
Analytics cookies: used to collect anonymous information about how visitors use our website (e.g. via Wix Analytics or Google Analytics), helping us improve our content and structure.
Functional cookies: used to remember your preferences and improve your experience.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the site. Where required by law, we will seek your consent before placing non-essential cookies.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include secure data storage, password protection, and limited access to personal information.

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. If you believe your data has been compromised, please contact us immediately.

10. How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how we handle your information, please contact us at:

Elite Joint Solutions South Gloucestershire, UK www.elitejointsolutions.com

We will aim to respond to all data-related requests within 30 days.

11. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO) Website: www.ico.org.uk Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you approach the ICO.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be published on this page, with the 'last updated' date clearly displayed at the top.

We encourage you to review this policy periodically. Continued use of our website or services following any update constitutes your acceptance of the revised policy.