Privacy Policy

Your privacy matters to us, particularly because the information you share with a physiotherapist is often personal and health-related. This privacy policy applies to Tylurs com, to the enquiries and booking requests you send us, and to the records we keep when you become a patient. Please read it alongside our terms of use and our medical disclaimer.

Who we are

Tylurs Physiotherapy (“we”, “us”, “our”) is the physiotherapy clinic behind Tylurs com. We decide how and why your personal information is used, which makes us the data controller for the purposes of data protection law.

• Business name: Tylurs Physiotherapy
• Email: hello@tyllurs.com
• Registered address: [registered business address]

If you have any questions about this policy or how we handle your information, email us or use the details on our contact page.

The information we collect

Information you give us

• Contact and booking forms: your name, phone number, email address, the service you are interested in, your preferred appointment date and anything you write in the message box.
• Emails, calls and messages: the content of your correspondence with us.
• Patient registration: details such as your date of birth, address, emergency contact, GP or referring clinician and, where relevant, insurance details.
• Job applications: your CV, cover note and any other information you choose to send if you apply through our careers page.

Health information

When you become a patient, we collect health information such as your symptoms, medical history, medications, assessment findings, treatment notes and progress. You may also mention health details when you make a booking request. Health information is special category data, which data protection law protects more strictly, and we handle it with extra care.

Please keep the message box on our forms brief. You can share the full details with your physiotherapist at your appointment.

Website technical data

When you visit Tylurs com, our hosting provider automatically records limited technical information, such as your IP address, browser type, device type, the pages requested and the date and time of your visit. We use this only to keep the website running securely and to diagnose faults.

How we use your information

We use your personal information to:

• respond to enquiries and arrange appointments
• assess, treat and support you as a patient, and keep accurate clinical records
• contact you about your care, including appointment confirmations and reminders
• process payments and, if you ask us to, support claims with your insurer
• consider job applications and keep in touch with applicants
• keep our website and systems secure and working properly
• meet our legal, regulatory and professional obligations

We do not sell your personal information. We do not send you marketing messages unless you have agreed to receive them, and you can change your mind at any time.

Our lawful bases for using your information

Data protection law requires a valid reason, called a lawful basis, for each use of personal information. Depending on the laws that apply to us, we rely on the following.

Purpose	Lawful basis
Responding to enquiries and booking requests	Taking steps at your request before providing a service, and our legitimate interest in running the clinic; for any health details you include, the provision of health care
Providing and recording your care	Performing our contract with you; for health data, the provision of health care by professionals bound by a duty of confidentiality
Keeping clinical records	Our legal and professional obligations
Payments and insurer claims	Performing our contract with you; your consent where we share health details with an insurer
Website security and troubleshooting	Our legitimate interest in operating a safe, reliable website
Recruitment	Taking steps at your request before a possible employment contract
Optional marketing messages	Your consent

Where we rely on your consent, you can withdraw it at any time. This does not affect anything we did with your information before you withdrew it.

Who we share your information with

We share personal information only when it is necessary and lawful to do so:

• Your GP or other clinicians, with your consent, for example to send a treatment summary or to refer you for further investigation. We may share information without consent only in exceptional circumstances permitted by law, such as a medical emergency or a serious safeguarding concern.
• Insurers, at your request, when you ask us to support a claim or to bill your policy directly.
• IT and service providers, such as website hosting, email, practice management and payment providers, who process information on our behalf under written contracts that require them to keep it secure and confidential.
• Professional advisers, regulators and authorities, where we are legally required to share information or need to establish or defend a legal claim.

International transfers

Some of our service providers may store or process information in other countries. Where personal information is transferred to a country that does not offer an equivalent level of protection, we put appropriate safeguards in place as required by law, such as recognised standard contractual clauses.

How long we keep your information

We keep personal information only for as long as we need it:

• Clinical records are kept for as long as our professional and legal obligations require. These periods can run to several years, and longer for children, so that your records are available if they are needed for your future care.
• Enquiries that do not lead to an appointment are deleted once they are no longer needed to deal with your request.
• Job applications are kept for a limited period after a recruitment decision, unless you ask us to keep them on file for future roles or to delete them sooner.
• Website technical logs are kept for a short period for security purposes.

When information is no longer needed, we delete it or anonymise it securely.

How we protect your information

We use appropriate technical and organisational measures to protect your information. These include encrypted connections (HTTPS) on our website, access controls so that only people who need your information can see it, and confidentiality duties for everyone who works with us. No method of sending information over the internet is completely secure, so please avoid sending detailed health information by ordinary email where you can.

Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you
• ask us to correct information that is inaccurate or incomplete
• ask us to delete your information, where we are not required to keep it
• ask us to restrict, or object to, certain uses of your information
• receive your information in a portable format
• withdraw your consent where we rely on it

To make a request, email hello@tyllurs.com. We may need to confirm your identity first, and we will respond within the time limits set by law. We do not make decisions about you based solely on automated processing.

Cookies and similar technologies

Tylurs com currently uses only essential technical storage that the website needs to work. We do not use advertising cookies or analytics tracking. If we add analytics or other non-essential cookies in future, we will update this policy and, where required, ask for your consent first.

Children

Our website is not aimed at children. If we treat a child, we collect information from their parent or guardian, who is involved in decisions about their care in line with the child’s age and understanding. Children’s records are kept with the same care and confidentiality as all patient records.

Changes to this privacy policy

We may update this policy to reflect changes in the law, in our services or in how we use information. The date at the top of this page shows when it was last updated, and we will make any significant changes clear on this page.

How to complain

If you are unhappy with how we have handled your information, please contact us first at hello@tyllurs.com so that we can try to put things right. You also have the right to complain to the data protection authority in the country where you live or work, or where you believe the problem occurred.