Privacy Policy – Rehab Therapist

Last updated:
11/08/2025

1. Introduction

KG Healthcare Ltd trading as Rehab Therapist (“we”, “our”, “us”) is committed to protecting your privacy and ensuring your personal information is handled in accordance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we collect, use, store and protect your information, and the rights you have over your data.

We provide specialist rehabilitation services at clients’ homes and care homes across the UK.

2. What information we collect

a) Identification and contact details
Name, address, telephone number, email address.

b) Health and treatment information
Medical history, diagnosis, treatment records, referrals, clinical notes, outcome measures.

c) Financial information
Payment details for invoicing and transactions.

d) Website usage information
IP address, browser type, pages visited, time spent on site (see our Cookie Policy).

3. How we collect your information

• Directly from you when you enquire, book services, or provide health information.
• From your GP, consultant, or other healthcare professionals (with your consent).
• Through our website forms or email correspondence.
• From third-party case managers, insurers or solicitors (with lawful basis).

4. How we use your information

• Assess, plan and deliver rehabilitation services.
• Maintain accurate clinical records as required by law and professional standards.
• Communicate with you regarding appointments, care, and follow-up.
• Process payments and manage accounts.
• Respond to enquiries or complaints.
• Meet legal and regulatory obligations.

We will never use your data for marketing without your explicit consent.

5. Lawful basis for processing

• Consent (Article 6(1)(a) and 9(2)(a)): when you agree to us holding and sharing your health information.
• Contract (Article 6(1)(b)): to provide services you have requested.
• Legal obligation (Article 6(1)(c)): to comply with record retention laws and professional regulations.
• Vital interests (Article 6(1)(d)): in urgent situations to protect your health.
• Legitimate interests (Article 6(1)(f)): for administrative purposes where this does not override your rights.

6. Sharing your information

• Other healthcare professionals involved in your care.
• Case managers, insurers, solicitors (with your consent or lawful basis).
• Third-party service providers (e.g. clinical software, secure cloud storage) that meet UK GDPR requirements.
• Regulatory bodies or law enforcement where required by law.

We do not sell your personal information.

7. Data storage and transfers

Your information is stored securely within the UK or EEA. Where data is transferred outside the UK/EEA, we ensure adequate safeguards are in place, such as UK-approved Standard Contractual Clauses.

8. How long we keep your data

We keep clinical records in line with legal and professional guidelines:

• Adults: minimum 8 years after the last treatment date.
• Children: until age 26.
• Records relating to litigation: at least 10 years after closure.

After these periods, data is securely destroyed.

9. Your rights

• Access your personal data.
• Request correction of inaccurate information.
• Request deletion of your data (where not required by law).
• Restrict processing.
• Object to processing.
• Withdraw consent.
• Request data portability.

To exercise your rights, contact us at info@rehabtherapist.co.uk. You can also complain to the Information Commissioner’s Office (ICO) via www.ico.org.uk.

10. How we protect your data

• Encrypted devices and secure cloud systems.
• Role-based access controls.
• Regular data protection training for staff.
• Confidentiality agreements with all associates.

11. Contact us