Privacy Policy

1. Who we are

Full Motion Physio is a private physiotherapy clinic based at Sevendale House, 5-7 Dale Street, Manchester, M1 1JA, owned and operated by Khuram Amin (HCPC registered, CSP member). For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), Full Motion Physio is the data controller for personal data processed about its patients and website visitors.

2. What information we collect

• Contact details: name, email, phone number, postal address.
• Clinical data: health history, presenting condition, assessment findings, treatment notes, and progress records (special category data).
• Appointment information: bookings, cancellations, attendance.
• Website data: anonymised analytics where applicable, and any information you submit through the contact form.

3. Why we use your data

• To provide physiotherapy assessment, diagnosis, treatment, and follow-up care.
• To maintain accurate clinical records as required by professional regulators (HCPC and CSP).
• To contact you about your appointments and treatment.
• To process payments for services.
• To comply with legal, regulatory, and insurance obligations.

4. Lawful bases for processing

We rely on the following lawful bases under the UK GDPR:

• Article 6(1)(b): performance of a contract (your treatment).
• Article 6(1)(c): compliance with legal obligations.
• Article 9(2)(h): provision of healthcare and management of healthcare services (special category data).
• Article 6(1)(a): your explicit consent, where required (e.g. marketing emails).

5. How long we keep your data

Clinical records are retained in line with CSP and HCPC recommendations: a minimum of 8 years after your last appointment for adult patients, and until your 25th birthday (or longer where indicated) for patients under 18. Contact-form enquiries that do not lead to treatment are kept for up to 12 months.

6. Who we share your data with

We only share your data when necessary and lawful. This may include:

• Your GP or referring clinician (with your consent).
• Insurance companies (where you are claiming for treatment).
• Regulators (HCPC, CSP) where required.
• Trusted service providers (e.g. secure clinical software, payment processors) under written data-processing agreements.

We never sell your personal data.

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure (subject to legal retention obligations).
• Restrict or object to processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies & analytics

This website uses only the cookies essential to operate. We do not currently use third-party advertising or tracking cookies. If we introduce analytics in future, this policy will be updated and consent obtained where required.

9. Security

Clinical records are stored on secure, password-protected systems with appropriate technical and organisational safeguards. Paper records (where used) are stored in locked storage at the clinic.

10. Contact

For any questions about this policy or to exercise your data rights, please contact:

This policy may be updated from time to time. The version above applies as of 1 May 2026.