Privacy Policy

Last updated 25 July 2026.

Who we are

EW Physio is a private physiotherapy practice run by Ella Wood, an HCPC-registered physiotherapist and member of the Chartered Society of Physiotherapy. The clinic is at Eastfields, Culford School, Bury St Edmunds, Suffolk IP28 6TX.

Ella Wood is the data controller for the personal information described in this policy. You can contact her at ewoodphysio@gmail.com or on 07703 759774.

What we collect

If you use the enquiry form or email us: your name, email address, and whatever you choose to write in your message. Please note that if you describe your symptoms, injury or medical history, that is health data, which UK law treats as a special category requiring extra protection. Only share what you are comfortable sharing at this stage — you do not need to describe your condition in detail to book.

If you become a patient: your contact details, date of birth, GP details where relevant, medical history, details of your assessment, diagnosis, treatment and rehabilitation, consent records, and any correspondence with insurers or other clinicians involved in your care.

If you pay us: a record of the payment. Card details are handled directly by our card provider and are never stored by EW Physio.

Why we use it, and our lawful basis

We use your information to answer enquiries, arrange and deliver appointments, keep accurate clinical records, invoice you or your insurer, and meet our professional and legal obligations.

Under UK GDPR our lawful bases are: consent for responding to your enquiry; contract for arranging and delivering your appointments; legal obligation for records we are required to keep; and legitimate interests for the day-to-day running of the practice. For health data specifically, we rely on Article 9(2)(h) — the provision of health treatment and the management of health care services — which applies to regulated clinicians bound by professional confidentiality.

Who we share it with

We do not sell your information and we do not use it for advertising. We share it only where necessary:

• Our booking and clinical records system, which stores appointment and treatment records on our behalf.
• Your insurer, where you are claiming for treatment and have asked us to invoice them.
• Your GP or another healthcare professional, but only with your consent, or where there is a serious risk to your safety or someone else's.
• Our website host and our payment provider, for the parts of the service they operate.
• Regulators, insurers or legal advisers where we are required or entitled to do so by law.

How long we keep it

Enquiries that do not lead to an appointment are deleted within 12 months. Clinical records for adults are kept for 8 years after your last appointment, in line with Chartered Society of Physiotherapy guidance. Records for anyone treated as a child are kept until their 25th birthday. Financial records are kept for 6 years for tax purposes.

Your rights

You have the right to ask for a copy of the information we hold about you, to have inaccurate information corrected, to ask us to delete information where we are not required to keep it, to restrict or object to how we use it, and to withdraw consent at any time. Withdrawing consent does not affect treatment you have already received, and we may still need to retain your clinical record for the periods set out above.

To exercise any of these rights, email ewoodphysio@gmail.com. We will respond within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you raised it with us first so we can put it right.

Cookies

This website uses only the cookies necessary for it to function, set by our website platform. We do not use advertising or tracking cookies.

Changes to this policy

If we change this policy we will update the date at the top of this page.