Privacy Policy

Who we are

Physio and Performance ("we", "our", "us") is a physiotherapy and performance practice operating from three London clinics inside UNTIL — Soho (111 Charing Cross Road, WC2H 0DT), Liverpool Street (280 Bishopsgate, EC2M 4RB), and Marylebone (1 Orchard Street, W1H 6HJ) — plus home visits across London and online sessions. Our data controller contact is info@physioandperformance.co.uk.

What personal data we collect

• Contact details you provide when booking (name, email, phone)
• Medical history and relevant health information required for safe assessment and treatment
• Clinical assessment notes, strength and movement measurements, treatment and rehabilitation plans, and progress reviews
• Where relevant, nutrition and dietetic intake information you choose to share
• Payment information processed securely via our booking provider
• Website analytics — only after you accept the consent banner — via PostHog (EU region). We capture page views and clicks on call/booking buttons. We never capture form-input text, names, addresses, or any clinical detail.

How we use your data

Your personal and clinical data is used solely to provide safe physiotherapy, rehabilitation, and nutrition care, for legally required clinical record-keeping, and to keep you informed about your own treatment. We do not sell data, we do not share data with third parties for marketing, and we do not use any clinical material for marketing without your explicit written consent.

Data processors we use

• Our booking provider — appointment scheduling, clinical notes, and payments. The provider holds your booking history and the clinical record we generate at each visit, under UK/EU GDPR data-processing terms.
• PostHog (EU region) — anonymised website analytics for visitors who accept the consent banner. No clinical or personal data flows to PostHog.

Your rights

Under UK GDPR you have the right to access your data, correct inaccuracies, request deletion (subject to the clinical retention period below), restrict processing, and lodge a complaint with the Information Commissioner's Office. To exercise any right, contact info@physioandperformance.co.uk.

How long we keep your data

Clinical records are retained for 8 years from the date of your last appointment, in line with HCPC Standards of Conduct, Performance and Ethics. Marketing consent can be withdrawn at any time; withdrawal takes effect within 7 working days. Website analytics data is processed by PostHog in the EU region (Frankfurt) under its EU Data Processing Addendum and retained for 7 years from collection or until you withdraw consent — whichever comes first.

Changes to this policy

This policy was last updated on 31 May 2026. Material changes will be notified to existing patients by email.