Privacy Policy
Last updated: 3 November 2026.
1. Introduction
We are committed to protecting the privacy of the people who visit this website and who contact us or are treated by us. This policy explains what personal data we collect, why, who we share it with and what your rights are.
In this policy “we”, “us” and “our” refer to The Lower Limb Clinic, which is the controller of the personal data described here. Our details are in Section 10.
2. The personal data we collect
- Enquiry data. When you use our contact form, email or phone us, we collect your name, email address, phone number if you give it, and the contents of your message. This comes from you.
- Health and treatment data. Before and during treatment we collect information about your health, such as details of your knee symptoms, medical history, medication, allergies, any x-ray reports, consent forms, questionnaire answers, treatment records and follow-up outcomes. This comes from you and, with your agreement, from your GP or other healthcare providers. This is “special category” data and we take extra care with it.
- Payment data. Payment is by bank transfer or cash. We keep a record of what was paid and when. We do not collect card details through this website.
- Technical data. When you visit the website, our hosting provider and the services the site uses may process your IP address, browser type and the pages you request. See our Cookies Policy.
Please do not put detailed health information in the contact form. We will ask for what we need during your consultation.
3. How we use your data and our legal bases
- Replying to your enquiry and arranging your appointment. Legal basis: taking steps at your request before entering into an agreement, and our legitimate interest in responding to enquiries.
- Providing your assessment and treatment, and keeping clinical records. Legal basis: performing our agreement with you, and our legal and professional obligations. For health data, the additional condition is that the processing is necessary for the provision of health care by a health professional.
- Taking payment and keeping accounting records. Legal basis: performing our agreement with you, and our legal obligations.
- Follow-up after treatment (for example an email four weeks later to ask about your outcome). Legal basis: provision of health care, and our legitimate interest in checking that your care went well.
- Keeping our website and business secure, and handling complaints, insurance and legal claims. Legal basis: our legitimate interests in protecting our business and our legal rights.
We do not use your data for direct marketing, and we do not sell it.
4. Who we share your data with
- Your GP or other healthcare providers, where this is needed for your care and with your agreement, unless the law requires or allows otherwise.
- Service providers who help us run the website and the clinic, acting on our instructions. These include our contact form provider (Tally) and our website hosting provider (Cloudflare).
- Our insurers and professional advisers, where necessary for insurance, risk management or professional advice, and for the establishment, exercise or defence of legal claims.
- Authorities and others, where the law requires it, or where it is necessary to protect your vital interests or those of another person.
5. International transfers
Some of our service providers may process data outside the UK. Where they do, we rely on appropriate safeguards required by UK data protection law, such as an adequacy decision or approved standard contractual clauses.
6. How long we keep your data
- Enquiries that do not lead to treatment are kept for as long as needed to deal with them, and no longer than necessary.
- Clinical records are kept for the period required by professional guidance and the law, which can be several years.
- Accounting records are kept for the period required by tax law.
We may keep data for longer where necessary for legal obligations or to establish, exercise or defend legal claims. When we no longer need it, we delete it or anonymise it securely.
7. Your rights
Under data protection law you have the right to:
- access the personal data we hold about you and get a copy of it;
- have inaccurate data corrected and incomplete data completed;
- ask us to erase your data, in some circumstances (this is limited where we must keep clinical records);
- ask us to restrict how we use your data;
- object to our processing based on legitimate interests;
- ask for your data to be transferred to you or another organisation, where it applies; and
- withdraw your consent at any time, where we rely on consent.
To use any of these rights, contact us using the details in Section 10. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to put things right first.
8. Cookies
Information about cookies and similar technologies is in our Cookies Policy.
9. Changes to this policy
We may update this policy from time to time by publishing a new version here. The date at the top shows when it was last updated.
10. Our details
This website is operated by The Lower Limb Clinic, Cheshire and South Manchester.
Contact us by email at rebecca@thelowerlimbclinic.co.uk, by phone on 07969 791 168. Questions about your data can be sent to either.