FS Physio London Back to home

FS Physio London

Privacy Policy

Last updated: 19 July 2026

1. Who we are

FS Physio London is operated by Francesco Sacceddu trading as FS Physio London, a sole trader providing adult physiotherapy services in London.

Francesco Sacceddu trading as FS Physio London is the data controller responsible for deciding how your personal information is collected and used.

FS Physio London is registered with the Information Commissioner’s Office.

You can contact us about privacy or your personal information at:

If physiotherapy is provided on behalf of another clinic or healthcare organisation, that organisation may also be responsible for some of your information and its privacy notice may also apply.

2. What this policy covers

This policy explains how personal information is handled when you:

  • visit the FS Physio London website;
  • telephone, email or submit an appointment request;
  • are referred to FS Physio London;
  • receive home-visit or virtual physiotherapy;
  • make a payment or receive an invoice;
  • communicate about your care; or
  • exercise a data protection right or make a complaint.

FS Physio London provides services to adults aged 18 and over and does not knowingly provide treatment to children.

3. Information we collect

Identification and contact information

This may include your:

  • name;
  • home address and postcode;
  • email address;
  • telephone number;
  • date of birth;
  • emergency contact; and
  • preferred method of communication.

Health and clinical information

This may include:

  • symptoms, injuries, diagnoses and medical history;
  • medication, operations, hospital stays and previous treatment;
  • mobility, strength, balance, pain and functional assessments;
  • falls, risks within the home, mobility equipment or support requirements;
  • treatment plans, clinical notes, exercises and progress;
  • relevant information about your GP, consultant or other healthcare professionals; and
  • photographs or videos where clinically necessary and separately agreed.

Health information is “special category data” and receives additional legal protection.

Your clinical record includes the assessment findings, relevant medical history, treatment notes, exercise plans, progress notes and clinical correspondence created in connection with your care.

Clinical records are stored securely on local systems controlled by FS Physio London. They are not stored in Stripe, WordPress, Zoom or Microsoft Teams.

Appointment and communication information

This may include:

  • appointment dates and times;
  • requested service;
  • messages and emails;
  • telephone notes;
  • cancellation information; and
  • communication preferences.

The website appointment form asks for your name, email address, phone number, postcode, requested service and an optional message.

Please avoid including medical information that is not necessary for the initial enquiry.

Payment and invoicing information

This may include:

  • treatment charges;
  • invoices;
  • payment status;
  • transaction references; and
  • information needed for accounting, taxation or reimbursement.

Payments and invoices are managed using Stripe. Stripe may process payment information including your name, contact details, payment-card details, billing information, IP address and transaction information.

FS Physio London does not receive or store your complete payment-card number.

Website and technical information

The website and its IONOS hosting infrastructure may process:

  • your IP address;
  • browser, operating system and device type;
  • requested pages or files;
  • the date and time of access;
  • referring website information; and
  • security, spam-prevention and error logs.

IONOS states that IP addresses collected in its standard web-hosting visitor logs are anonymised when collected.

4. Where information comes from

Information is usually collected directly from you.

Relevant information may also be received from:

  • a relative, carer or authorised representative;
  • your GP, consultant, hospital or another healthcare professional;
  • a clinic or healthcare organisation referring you;
  • an insurer, case manager, solicitor or employer, where applicable and lawful; or
  • another person arranging care on your behalf.

If someone provides information about you, FS Physio London will normally explain how it is being used when first contacting you, unless an applicable legal exception applies.

Please make sure you have permission before providing another person’s contact information.

5. How and why we use personal information

Enquiries and appointments

Contact, postcode and relevant health information is used to:

  • respond to your enquiry;
  • assess whether physiotherapy is suitable;
  • check whether your location is covered; and
  • arrange an appointment.

The lawful basis is taking steps at your request before entering into, or performing, a contract.

Where health information is involved, it is processed under Article 9(2)(h) UK GDPR and Schedule 1, Part 1, paragraph 2 of the Data Protection Act 2018 because it is necessary to provide healthcare or treatment.

Providing physiotherapy

Information is used to:

  • assess your condition and needs;
  • provide safe and appropriate treatment;
  • prepare exercises and rehabilitation plans;
  • monitor progress;
  • communicate about your care; and
  • maintain an accurate clinical record.

The lawful basis is performance of the physiotherapy contract with you.

Health information is processed where necessary to provide healthcare by an HCPC-registered health professional who is subject to professional confidentiality.

Coordinating your care

Where appropriate, relevant information may be shared with healthcare professionals involved in your care.

You will normally be made aware of this, and your wishes will be respected unless there is a lawful reason to act without your permission, such as a serious emergency, safeguarding concern or legal obligation.

Payments and administration

Information is used to:

  • issue invoices;
  • process payments through Stripe;
  • maintain accounting and tax records;
  • manage appointments; and
  • administer the service.

The lawful bases are performance of a contract, compliance with legal obligations and the legitimate interest in operating and administering the business.

Stripe may also process payment information for its own regulatory, fraud-prevention and security purposes.

Professional, regulatory and legal obligations

Information may be processed to comply with:

  • professional record-keeping standards;
  • tax and accounting obligations;
  • safeguarding duties;
  • regulatory enquiries;
  • court orders; or
  • other applicable legal requirements.

Protecting safety

In an emergency, information may be used or disclosed where necessary to protect your life or physical safety, or that of another person.

Legal claims

Relevant information may be retained or used to obtain legal advice or establish, exercise or defend a legal claim.

The lawful basis is legitimate interests. Where health information is involved, Article 9(2)(f) UK GDPR may apply.

Website security

Limited technical information may be used to operate the website, prevent spam, investigate errors and maintain security.

The lawful basis is the legitimate interest in providing a secure and reliable website.

Marketing

Health information is never used for marketing.

FS Physio London will not send unrelated promotional electronic communications unless you have chosen to receive them or another lawful basis applies. You may opt out at any time.

6. Information you need to provide

You are not generally under a statutory obligation to provide personal information.

However, certain information is needed to:

  • assess whether treatment is appropriate;
  • arrange a home visit;
  • provide safe physiotherapy;
  • maintain an appropriate clinical record; and
  • collect payment.

If necessary information is not provided, FS Physio London may be unable to offer or continue treatment.

The free-text message in the website appointment form is optional.

7. Service providers and information sharing

Personal information is only shared where necessary and lawful.

Website and email — IONOS and WordPress

The FS Physio London website uses WordPress software and is hosted by IONOS. IONOS also provides the business email service.

When you visit the website or submit an appointment request, IONOS may process the information entered in the form together with limited technical information such as your IP address, browser type, requested pages, access time and security logs.

Appointment requests submitted through the website are transmitted to FS Physio London through the IONOS-hosted email service.

WordPress runs within the IONOS hosting environment. WordPress is not treated as a separate recipient of personal information unless a WordPress plugin or external WordPress service is used that sends information to another provider.

The appointment form should not be used to provide detailed or unnecessary medical information.

Stripe

Stripe provides payment and invoicing services.

Stripe may process identity, contact, billing, payment and transaction information. Stripe may act as a processor for FS Physio London and as a separate controller when it uses information for legal compliance, fraud prevention, payment-network requirements and security.

Stripe’s privacy information is available at https://stripe.com/gb/privacy.

Zoom and Microsoft Teams

Where you request or agree to a video consultation, it may be conducted through Zoom or Microsoft Teams.

These providers may process:

  • your name and contact information;
  • meeting identifiers;
  • IP address and device information;
  • connection and usage information; and
  • audio and video transmitted during the consultation.

Video consultations are not routinely recorded.

If recording were ever proposed, this would be explained in advance and would only take place with an appropriate lawful basis and any separately required agreement.

You may choose not to use video consultation and request an alternative appointment format, subject to availability and clinical suitability.

Other recipients

Where necessary and lawful, information may also be shared with:

  • healthcare professionals involved in your care;
  • a carer or authorised representative;
  • a referring clinic, insurer, case manager, solicitor or other organisation where authorised or otherwise lawful;
  • accountants, professional advisers, indemnity insurers and legal advisers;
  • the Health and Care Professions Council;
  • the Information Commissioner’s Office;
  • emergency services or safeguarding authorities;
  • courts, law-enforcement bodies or public authorities; and
  • a suitable successor responsible for securely maintaining clinical records if the practice closes.

FS Physio London does not sell personal information.

8. Local clinical-record storage and security

Clinical records are stored securely on local systems controlled by FS Physio London.

Appropriate technical and organisational measures are used to protect personal information against unauthorised access, accidental loss, alteration or disclosure.

These measures include appropriate device and account security, access restrictions, secure storage and secure deletion or destruction when information is no longer required.

Clinical information is treated as confidential and accessed only where needed for your care, administration, professional obligations or another lawful purpose.

No internet or email system can be guaranteed completely secure. Please avoid sending unnecessary medical information by ordinary email or through the initial website enquiry form.

9. International transfers

IONOS, Stripe, Zoom and Microsoft may use corporate-group companies, data centres or subprocessors located outside the United Kingdom.

Where a restricted international transfer takes place, FS Physio London will require it to be covered by:

  • UK adequacy regulations;
  • legally recognised safeguards, such as the UK International Data Transfer Agreement or UK Addendum;
  • an appropriate data-processing agreement and any required transfer assessment; or
  • another lawful exception.

Information about applicable safeguards can be requested by emailing info@fsphysiolondon.com.

Clinical records stored locally by FS Physio London are not routinely transferred internationally.

10. How long information is retained

Information is retained only for as long as reasonably necessary for its purpose and to meet clinical, professional, insurance, tax and legal requirements.

Normal retention periods are:

  • Enquiries that do not result in treatment: ordinarily up to 12 months after the last contact.
  • Adult clinical records: ordinarily at least eight years after the last treatment.
  • Invoices and financial records: ordinarily six years after the end of the relevant financial year.
  • Complaints, incidents and legal matters: for as long as necessary to investigate and resolve the matter and meet applicable legal or regulatory periods.
  • Standard IONOS website visitor logs: ordinarily up to eight weeks, according to IONOS’s stated web-hosting retention period.
  • Video-consultation metadata: according to the selected Zoom or Microsoft Teams account settings and applicable provider retention periods.

Information may be kept longer where there is an ongoing complaint, safeguarding concern, regulatory investigation, legal claim or legal preservation requirement.

When information is no longer required, it will be securely deleted, destroyed or anonymised.

11. Cookies and similar technologies

The website may use storage or access technologies that are necessary for security, spam prevention, appointment-form submission and core website functions.

At the date of this policy, FS Physio London does not intentionally use advertising cookies, behavioural tracking or third-party advertising analytics.

If analytics or other non-essential technologies are introduced, the information provided to website users will be updated. Consent or another legally required choice will be provided before the technology is used.

You can also use your browser settings to block or delete cookies, although doing so may affect website functionality.

12. Your data protection rights

Depending on the circumstances, you may have the right to:

  • request a copy of your personal information;
  • correct inaccurate or incomplete information;
  • request deletion of information;
  • restrict how information is used;
  • object to processing based on legitimate interests;
  • receive certain information in a portable format;
  • withdraw consent where processing relies on consent; and
  • complain about how information has been handled.

These rights are not absolute.

For example, FS Physio London may need to retain clinical records to meet professional obligations, provide continuity of care or establish or defend legal claims.

Information may be requested to verify your identity before responding. A valid rights request will normally be answered within one month, subject to any legally permitted extension.

To exercise a right, email info@fsphysiolondon.com.

13. Automated decisions

FS Physio London does not make treatment or service decisions solely through automated processing and does not conduct automated profiling producing legal or similarly significant effects.

14. Complaints

Data protection complaints can be sent to info@fsphysiolondon.com.

FS Physio London will:

  • acknowledge a data protection complaint within 30 days;
  • take appropriate steps to investigate it;
  • keep you informed where necessary; and
  • communicate the outcome without undue delay.

You may also complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

15. Changes to this policy

This policy may be updated when the services, technology providers, processing activities or legal obligations change.

The latest version will be published on the FS Physio London website with its updated date.

If a change materially affects how existing personal information is used, reasonable steps will be taken to bring it to the attention of affected individuals before the new use begins.