Privacy notice
How your information is used
What George Gauntlett Physio collects, why, and the choices you have.
In short
The short version.
George Gauntlett Physio collects the information needed to answer your enquiry and to provide safe physiotherapy care. Your clinical records are kept confidential and are not shared without your consent, except where the law or a serious safety concern requires it. You can ask to see your records, correct them, or complain, at any time.
This notice was last updated on 15 August 2026.
Who is responsible
Who controls your information.
George Gauntlett Physio is a trading name of George Gauntlett, a sole practitioner registered with the Health and Care Professions Council (HCPC PH113259) and a member of the Chartered Society of Physiotherapy. George is registered with the Information Commissioner’s Office as a data controller (ICO registration C2000206) and is the data controller for the information described in this notice.
Practice address: to be confirmed.
Email: george@georgegauntlettphysio.co.uk
What is collected
The information collected about you.
When you use the enquiry form on this website, the form collects your name, email address, telephone number if you provide one, the brief outline of the problem you write, and whether you have opted in to receive occasional marketing emails.
When you become a patient, the clinical record includes your contact and identifying details, relevant medical history, details of your assessment, diagnosis and treatment, any rehabilitation programmes prescribed, correspondence with you and, where relevant, with your GP, consultant or insurer, and records of appointments and payments.
Information about your health is treated in law as special category data and is given additional protection. The enquiry form deliberately asks only for a brief outline rather than a full history, and you are asked not to include sensitive medical detail in it. A full history is taken in person at your appointment, where it can be recorded securely.
Why and on what basis
Why your information is used.
Your information is used to respond to enquiries and arrange appointments, to assess, diagnose and treat you, to prescribe and monitor rehabilitation programmes, to keep the clinical records that professional regulation requires, to take payment and keep accounts, and, only where you have opted in, to send occasional practice updates.
Under UK GDPR, the lawful bases relied on are:
- Article 6(1)(b) and 6(1)(f) for responding to your enquiry and administering your care
- Article 9(2)(h) for health information, which permits processing for the provision of health care and treatment by a registered health professional under a duty of confidentiality
- Article 6(1)(c) where a legal obligation applies, such as keeping records for the required period
- Article 6(1)(a) consent, for marketing emails only, which you can withdraw at any time
Withdrawing marketing consent will never affect your enquiry, your appointment or your care.
Who else is involved
Who your information is shared with.
Your clinical information is not sold, and it is not shared for marketing. It may be shared in the following circumstances:
- With your GP, consultant or another clinician, where this is relevant to your care and with your knowledge
- With your insurer, where your treatment is funded by them and you have authorised it
- Where the law requires it, or where there is a serious risk of harm to you or another person
The following service providers process information on George's behalf under contract:
- Web3Forms delivers enquiries from the form on this website to George's email. Web3Forms does not store submissions; it forwards them and then deletes its server logs periodically. Its servers are in the United States, so an enquiry sent through the form involves a transfer of that information outside the UK.
- Google (Gmail) hosts the email account that receives enquiries.
- Rehab Guru hosts personalised rehabilitation programmes where one is prescribed for you.
- GitHub Pages hosts this website.
If you would prefer not to use the online form, you can email George directly using the details above.
How long it is kept
How long information is held.
Enquiries that do not lead to an appointment are deleted once the enquiry is closed and no longer needed.
Clinical records for adults are retained for a minimum of eight years after the final appointment, in line with professional guidance for physiotherapy records.
Clinical records for children are retained until their twenty-fifth birthday, or their twenty-sixth if they were seventeen at the time of treatment.
Financial records are kept for six years, as tax law requires.
Marketing consent records are kept for as long as you remain subscribed, and for a short period afterwards to evidence that you unsubscribed.
Your rights
What you can ask for.
Under UK data protection law you have the right to:
- Be told what information is held about you and receive a copy of it, normally within one month and free of charge
- Have inaccurate information corrected
- Ask for information to be deleted, though clinical records usually have to be kept for the retention periods above
- Ask that use of your information be restricted, or object to it
- Receive your information in a portable format
- Withdraw consent to marketing at any time, by using the unsubscribe link or by emailing the practice
To exercise any of these rights, email george@georgegauntlettphysio.co.uk.
If you are unhappy with how your information has been handled, please raise it with George first so it can be put right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
This website
Cookies and website analytics.
This website does not use advertising or tracking cookies and does not run analytics software. Two third-party elements do load when you visit:
- A Google Map showing the practice location, which sets cookies from Google when the map loads
- Google Fonts, which serves the typefaces used on the site and receives your IP address in doing so
The site is hosted on GitHub Pages, which keeps standard server logs.
Changes
Updates to this notice.
This notice may be updated from time to time. The date at the top shows when it was last changed. Where a change materially affects how your information is used, you will be told directly.