Privacy Policy

Who we are

St Albans Neuro Physio provides neurological physiotherapy in patients' homes across St Albans and Hertfordshire.

For the purposes of UK data protection law, Sheryll Pak is the data controller for the information described below. You can reach her at info@stalbansneurophysio.co.uk or on 01727 293088.

What we collect

When you send an enquiry through this website, we collect your name, phone number, email address (if you give one), the type of help you are looking for, and anything you choose to write in the message box. That message often includes health information about you or a family member.

If you become a patient, we also collect the clinical information needed to treat you safely — your medical history, assessment findings, treatment notes, and progress records.

This website does not use advertising or analytics cookies. It loads fonts from Google Fonts, which means Google receives your IP address when a page loads.

Why we can use it (lawful basis)

Health information is "special category data" and needs a higher level of justification. Ours is:

• Enquiries: we rely on your consent (UK GDPR Article 6(1)(a) and Article 9(2)(a)). You give this by ticking the consent box on the enquiry form. You can withdraw it at any time.
• Treatment: once you are a patient, we rely on Article 6(1)(b) (performing our contract with you) and Article 9(2)(h) — the provision of health care by a regulated professional under a duty of confidentiality.
• Records retention: Article 6(1)(c), to meet our legal and professional record-keeping obligations.

Who sees it

Sheryll Pak is the only person who routinely sees your information. We do not sell your data, and we do not share it for marketing.

We share information only where:

• You ask us to — for example, sending a progress report to your GP or consultant;
• It is needed for your care and you have agreed;
• We are required to by law, or there is a serious risk to someone's safety.

This website and the enquiry form run on our own server in the United Kingdom, so your enquiry is not passed to a third-party form provider. The only external service involved is our email provider, which delivers the enquiry to Sheryll's inbox. They act on our instructions and cannot use your information for their own purposes.

How long we keep it

Enquiries that do not become patients: deleted within 12 months.

Patient clinical records: retained for 8 years after your last appointment, in line with professional guidance for adult health records. For patients under 18, records are kept until their 25th birthday.

How we protect it

Information is held on password-protected, encrypted devices and accounts. Paper notes, where they exist, are stored securely. Enquiry data is transmitted over an encrypted (HTTPS) connection.

Your rights

Under UK GDPR you have the right to ask us to:

• Give you a copy of the information we hold about you;
• Correct anything that is wrong;
• Delete information, where we are not required to keep it;
• Restrict or object to how we use it;
• Withdraw consent you previously gave.

Email info@stalbansneurophysio.co.uk and we will respond within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first.

Changes to this policy

If we change how we handle your information we will update this page and revise the date at the top.