Katy Folley Wellness

Pelvic health Physiotherapy

Privacy Policy

​

Katy Folley Wellness Privacy Policy

​

Last updated: 9 June 2026

​

Katy Folley Wellness is committed to protecting your privacy and handling your personal data in a lawful, fair and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR). This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit our website, contact us, book appointments, receive treatment or otherwise interact with us.

​

Who we are

​

Katy Folley Wellness provides specialist pelvic health physiotherapy and wellness services. This Privacy Policy applies to personal information collected by us in person, by phone, by email, by letter, through social media, via our website, and through any booking, payment or record-keeping systems we use.

If you have any questions about this Privacy Policy or how we use your data, you can contact us at:

​

Katy Folley Wellness

Phone: 07859 216 922
Email: katyfolleywellness@gmail.com

​

What information we collect

​

We may collect and process the following types of personal data:

• Name.

• Date of birth.

• Address.

• Email address.

• Telephone number.

• Occupation.

• Referral source.

• Payment and account details.

• Clinical and treatment information.

• Background to your condition.

• Medical history.

• Your reasons for seeking physiotherapy and/or Pilates.

• GP or other healthcare professional details.

• Next of kin details, where relevant.

• Appointment notes, assessment notes, treatment notes and progress information.

• Information you provide in forms, emails, phone calls or messages.

• Website usage data and technical information such as IP address, browser type, device type and pages visited.

• ​

Some of the information we collect, particularly health information, is special category data under UK GDPR.

​

How we collect your data

​

We collect information when you:

• Contact us by phone, email or social media.

• Complete a form on our website.

• Book an appointment or make an enquiry.

• Attend an assessment, treatment session or class.

• Communicate with us about your care or services.

• Use our website, including pages that contain embedded maps or analytics technologies.

• ​

We may also receive information from other healthcare professionals, where relevant and appropriate, and from third-party systems used to manage bookings, payments, communications or clinical records.

​

Why we use your data

​

We use your personal data to:

• Respond to enquiries.

• Arrange and manage appointments.

• Deliver physiotherapy, Pilates and wellness services.

• Keep accurate clinical and administrative records.

• Assess your needs and monitor your progress.

• Issue invoices, take payments and manage accounts.

• Communicate with you about your care.

• Contact your next of kin in an emergency, where necessary.

• Communicate with your GP or other healthcare professionals, where appropriate and with your consent.

• Improve our website and services.

• Comply with legal, professional, tax and insurance obligations.

• Send service updates, workshop information or promotional information where permitted by law.

Lawful bases for processing

We rely on one or more of the following lawful bases under UK GDPR:

• Consent.

• Contract.

• Legal obligation.

• Legitimate interests.

• Vital interests, in rare emergency situations.

• ​

Where we process special category data, such as health information, we also rely on an additional condition under Article 9 of UK GDPR, such as explicit consent or processing necessary for health care and management of health-related services, depending on the circumstances.

​

How we use health data

​

Because we provide physiotherapy and wellness services, we may process health-related information that you share with us. We only collect this information where it is necessary for your care, treatment or service delivery, and we keep it secure and confidential.

​

​

Sharing your data

​

We may share your information with trusted third parties where necessary to run our business and provide services, including:

• Website hosting and platform providers.

• Analytics providers.

• Booking and scheduling systems.

• Payment processors.

• Electronic health record or clinical management systems.

• Transcription, documentation or note-support tools.

• Exercise programme platforms.

• Professional advisers such as accountants or insurers.

• Regulatory authorities, law enforcement or other bodies where required by law.

We only share the minimum information necessary and expect third parties to keep your data secure and use it only for the agreed purpose.

​

Service providers we use

​

We may use third-party services to support our website and practice, including:

• Google Analytics, to help us understand how visitors use our website.

• Google Maps, for embedded location and navigation features.

• Wix, for website hosting and management.

• Cliniko, for appointment, record and practice management.

• Stripe and Zettle, for payment processing.

• CliniScribe AI, for clinical note support.

• RehabMyPatient, for exercise programme delivery.

These providers may process personal data on our behalf or as independent controllers, depending on the service and context.

​

Cookies and analytics

​

Our website uses cookies and similar technologies. Some cookies are strictly necessary for the site to function, while others are optional and are used for analytics, website improvement and embedded services such as maps.

​

We use Google Analytics to understand how visitors use our website and improve the site. Google Analytics does not log or store individual IP addresses from UK users, but it does process usage information and coarse location data to provide website analytics.

​

We use embedded Google Maps to display location information and help you find us. Embedded maps may set cookies or use similar technologies when the map is loaded.

​

We only set non-essential cookies, including analytics cookies and cookies used by embedded maps, if you have given consent through our cookie banner or cookie preferences tool.

​

You can change or withdraw your cookie choices at any time using the cookie settings on our website or by changing your browser settings.

​

International transfers

​

Some of the third-party services we use may process data outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place to protect your personal data in line with UK GDPR requirements.

​

How long we keep your data

​

We keep personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, tax, insurance and clinical record-keeping requirements. For client records, we retain records for eight years after the last point of contact, in line with professional guidance.

​

Keeping your data secure

​

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse or disclosure. This includes limiting access to authorised personnel only, secure storage, password protection and other appropriate safeguards.

​

Your rights

​

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.

• Ask us to correct inaccurate or incomplete data.

• Ask us to erase your data in certain circumstances.

• Ask us to restrict or object to certain processing.

• Ask us to move your data in some circumstances.

• Withdraw consent where we rely on consent.

• Complain to the Information Commissioner’s Office if you are unhappy with how we handle your data.

If you wish to exercise any of these rights, please contact us using the details above. We may need to verify your identity before responding.

​

​

Marketing communications

​

We may send you information about services, classes, workshops or updates where we are permitted to do so. If we rely on consent, you can withdraw that consent at any time by contacting us.

​

Children

​

Our services are not directed at children, and we do not knowingly collect personal data from children without appropriate consent or another lawful basis. If you believe a child has provided us with personal data, please contact us so we can review and delete it where appropriate.

​

Third-party links

​

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties, and you should read their privacy policies separately.

​

Changes to this policy

​

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or website functionality. The latest version will always be published on this page with the updated date shown above.