Privacy notice
This notice explains what personal data Riverside Physiotherapy collects about you, why we collect it, and what your rights are.
Who we are
Riverside Physiotherapy, 12 Riverside Walk, Manchester, M3 4LZ.
We are registered with the Information Commissioner's Office under registration number ZA111222.
What data we collect
As a healthcare provider we hold the following types of personal data:
- Demographic and contact details — name, address, date of birth, phone, email, NHS number.
- Clinical records — your medical history, consultations, test results, prescriptions, referrals.
- Records of interactions with us — phone calls, online queries, appointment bookings.
Why we hold it and our legal basis
Under UK GDPR our lawful bases for processing your data are:
- Article 6(1)(e): performing a task carried out in the public interest (delivering NHS care).
- Article 9(2)(h): the provision of health and social care, by a health professional.
Who we share data with
We share your data with other NHS organisations involved in your care: hospitals, community services, social care providers, pharmacies, NHS 111. We also share information with NHS Digital and the Department of Health where required by law.
We never sell your data, and we never share it for marketing.
How long we keep it
We retain GP medical records in line with the NHS Records Management Code of Practice: ten years after the patient's death, or until the patient reaches age 25 (whichever is longer) for children's records.
Your rights
You have the right to:
- Access the information we hold about you (a Subject Access Request).
- Have inaccurate data corrected.
- Object to certain types of processing.
- Complain to the ICO.
Contact our Data Protection Officer
For data protection queries, contact the practice via our contact page.
Complaints
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or call 0303 123 1113.