Privacy Policy | Uplift Physio

Privacy Policy

Last updated: 26 August 2026

1. Who we are

Uplift Physio LTD (“we”, “us”, “our”) is a physiotherapy clinic with locations in Altrincham and Manchester, United Kingdom. We are the data controller responsible for any personal data you share with us through this website.

Company number: 15634709
Registered office: C & T Pharmacy, 77 Great Stone Road, Old Trafford, Stretford, Manchester, England, M32 8GR

If you have any questions about this policy, or wish to exercise your data protection rights, you can contact us at [email protected].

2. What data we collect

When you interact with our website, we may collect:

  • Information you provide: your name, email address, phone number, and the details you enter into our quiz or enquiry forms, such as the area affected, how the problem started, how long it has been going on, your day-to-day activity, and your recovery goals.
  • Health-related information: some of what you share (for example, details about your pain or injury) relates to your health. Under UK GDPR this is “special category” data, and we only process it with your explicit consent, so that we can respond to your enquiry and help you get the right care.
  • Technical data: IP address, browser type, device type, operating system, and approximate location.
  • Usage data: pages visited, time on page, and interactions, collected via Google Analytics.
  • Advertising attribution data: referrer URL, UTM parameters, and click identifiers such as fbclid (Meta) which tell us which advertisement brought you to our site.

3. How we use your data

We use the personal data you provide to:

  • Respond to your enquiry and contact you to arrange an assessment or appointment.
  • Provide and improve the physiotherapy services you have asked about.
  • Measure the performance of our advertising and marketing campaigns.
  • Detect and prevent fraud, abuse, or technical issues with our website.
  • Meet legal, regulatory, and tax obligations.

Contacting you about an enquiry you have submitted (for example, calling you back to arrange an appointment) is done to respond to your request and does not require marketing consent. We only send you marketing, such as offers or physiotherapy tips, if you have separately opted in, and you can withdraw that consent at any time using the unsubscribe option in any message or by emailing us.

We may use the details you provide to prioritise and route enquiries (for example, how soon to call you), but decisions about your care are always made by a qualified member of our team, not by an automated process.

4. Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases:

  • Consent: for non-essential analytics and advertising cookies, and where you have opted in to receive marketing communications from us.
  • Explicit consent, and the provision of health care (UK GDPR Article 9(2)(h)): for any health-related (special category) information you share, so that we can respond to your enquiry and provide physiotherapy assessment and care.
  • Legitimate interest: for responding to enquiries you submit, measuring the performance of our advertising, and improving our services.
  • Contract: where processing is necessary to deliver a service you have requested.
  • Legal obligation: for tax, accounting, and regulatory requirements.

5. Third parties we share data with

We share data only with the trusted service providers we need to operate our clinic. These include:

  • HighLevel Inc. (GoHighLevel / LeadConnector): our CRM, used to manage your enquiry and communicate with you.
  • Nookal: our appointment scheduling and practice management software.
  • Meta Platforms, Inc. (Facebook / Instagram): conversion tracking and advertising performance via the Meta Pixel and the Meta Conversions API. This may include limited identifiers (such as your email address or phone number in hashed, non-readable form) used only to match ad performance. We do not send Meta any details about your health, your condition, or the answers you give in our quiz. For certain pixel and event data, Meta acts as a joint data controller with us for the collection and transmission of that data; more information is available in Meta’s Controller Addendum.
  • Google LLC (Google Analytics): on-site analytics to understand how the website is used.
  • Email and telephony providers used to contact you about your enquiry.

We do not sell, rent, or trade your personal data with anyone for their own marketing purposes.

6. Cookies and tracking

Our website uses cookies and similar technologies to:

  • Make the site work (essential cookies).
  • Measure how the site is used (analytics cookies: Google Analytics).
  • Measure and improve the performance of our advertising (advertising cookies: Meta Pixel).

Essential cookies are always active. Non-essential analytics and advertising cookies are only set after you accept them in the cookie banner shown when you first visit. You can change or withdraw your choice at any time by clearing this site’s cookies and site data in your browser, which will make the banner appear again on your next visit.

You can also opt out of interest-based advertising from participating companies, including Meta, at youronlinechoices.eu (UK and EU) and aboutads.info/choices.

7. Data retention

We retain your personal data only for as long as we need it:

  • Clinical records (for patients we treat) are kept in line with professional records-management guidance, normally around 8 years after your last treatment for adults, and until age 25 (or 26 if you were 17 at your last treatment) for children.
  • Enquiries that do not become appointments are kept for up to 24 months, then deleted or anonymised.
  • Accounting and tax records are kept for at least 6 years to meet UK legal obligations.
  • Analytics and advertising data are retained for shorter periods in line with each provider’s own retention rules.

8. Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you.
  • Rectify any data that is inaccurate or incomplete.
  • Erase your data where there is no compelling reason for us to keep it.
  • Restrict or object to certain processing of your data.
  • Receive a copy of your data in a portable format.
  • Withdraw consent at any time where consent is our lawful basis for processing.

To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) if you believe we have mishandled your data.

9. Data security

We use reasonable technical and organisational measures to protect your personal data. No transmission over the internet is completely secure, but we work with reputable providers and apply industry-standard practices to reduce risk.

10. International transfers

Some of our service providers process data outside the United Kingdom (for example in the United States). Where this happens, we rely on UK-approved transfer mechanisms such as the UK International Data Transfer Agreement or Standard Contractual Clauses to keep your data protected.

11. Children

This website and enquiry form are intended for adults. We do not knowingly collect personal data from children under 16 through this website without the consent of a parent or guardian. Where treatment involves a child, arrangements are made directly with a parent or guardian.

12. Changes to this policy

We may update this policy from time to time. The most current version will always be at this URL, with the “last updated” date at the top. Material changes will be communicated where reasonably possible.

13. Contact

For any questions, requests, or complaints relating to this policy or your personal data, email [email protected].

Back to home