Data Protection

Physio CYP – Data Protection Policy

1. Introduction

Physio CYP Ltd is committed to protecting the privacy and security of personal data we process. This policy outlines our commitment to data protection principles and our procedures for collecting, processing, storing, and disposing of personal data in compliance with applicable data protection laws, including [mention relevant laws, e.g., the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018].

2. Scope

This policy applies to all employees, contractors, volunteers, and third parties who process personal data on behalf of Physio CYP Ltd. It covers all personal data, regardless of how it is collected, stored, or used.

3. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• Processing: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• Data Subject: The individual to whom the personal data relates.
• Data Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. (In most cases, Physion CYP Ltd will be the Data Controller).
• Data Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

4. Data Protection Principles

Physio CYP Ltd adheres to the following data protection principles:

• Lawfulness, Fairness, and Transparency: Personal data will be processed lawfully, fairly, and in a transparent manner in relation to the data subject.
• Purpose Limitation: Personal data will be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
• Data Minimisation: Personal data will be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
• Accuracy: Personal data will be accurate and, where necessary, kept up to date. Every reasonable step will be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.
• Storage Limitation: Personal data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
• Integrity and Confidentiality (Security): Personal data will be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
• Accountability: The data controller (i.e., Physio CYP Ltd) is responsible for, and must be able to demonstrate compliance with, the above principles.

5. How We Process Personal Data

Physio CYP Ltd collects and processes personal data for various purposes, including but not limited to:

• Employee Data: For HR, payroll, and performance management.
• Customer/Client Data: To provide services, manage accounts, and communicate.
• Supplier Data: For procurement and contract management.
• Marketing Data: For communicating about our products/services (with consent where required).

We will only process personal data where we have a lawful basis to do so, such as:

• The data subject has given consent.
• Processing is necessary for the performance of a contract with the data subject.
• Processing is necessary for compliance with a legal obligation.
• Processing is necessary to protect the vital interests of the data subject.
• Processing is necessary for the performance of a task carried out in the public interest.
• Processing is necessary for the purposes of the legitimate interests pursued by Physio CYP Ltd or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

6. Data Subject Rights

We respect the rights of data subjects concerning their personal data. These rights include:

• The right to be informed: About the collection and use of their personal data.
• The right of access: To obtain confirmation that their data is being processed and to access it.
• The right to rectification: To have inaccurate personal data rectified, or completed if it is incomplete.
• The right to erasure (right to be forgotten): To request deletion or removal of personal data where there is no compelling reason for its continued processing.
• The right to restrict processing: To block or suppress processing of personal data in certain circumstances.
• The right to data portability: To obtain and reuse their personal data for their own purposes across different services.
• The right to object: To processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling), and direct marketing (including profiling).
• Rights in relation to automated decision making and profiling.

Requests to exercise these rights should be made to [Name/Department/Contact Email].

7. Data Security

Physio CYP Ltd implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Regular review of security measures.
• Procedures for handling data breaches.

8. Data Breaches

In the event of a personal data breach, Physio CYP Ltd will take immediate steps to assess the breach, contain the damage, and notify affected parties and the relevant supervisory authority [e.g., the Information Commissioner’s Office (ICO) in the UK] as required by law.

9. Data Retention

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Retention periods will be [specify general approach, e.g., documented in a separate retention schedule].

10. Third-Party Processors

Where we use third-party data processors, we will ensure that they provide sufficient guarantees to implement appropriate technical and organisational measures and process data in accordance with our instructions and data protection laws. This will be documented through data processing agreements.

11. International Data Transfers

[If applicable: If personal data is transferred outside of [relevant jurisdiction, e.g., the UK/EEA], appropriate safeguards will be put in place to ensure the data remains protected, such as Standard Contractual Clauses or adequate country decisions.]

12. Roles and Responsibilities

• Physio CYP Ltd Management: Overall responsibility for ensuring compliance with data protection laws and this policy.
• [Designated Person/Department, e.g., Data Protection Officer (DPO) or designated individual]: Responsible for overseeing data protection strategy and implementation, and acting as a point of contact for data subjects and supervisory authorities.
• All Employees: Responsible for understanding and adhering to this policy in their daily work.

13. Training

All relevant staff will receive regular training on data protection principles and their responsibilities under this policy.

14. Policy Review

This policy will be reviewed [e.g., annually] or as necessary to ensure its continued effectiveness and compliance with current legislation.

15. Contact Information

If you have any questions about this policy or our data protection practices, please contact:

Alex Webster –  Email : info@physiocyp.co.uk, Phone : 07417 523 501

Date of Last Review: [08/2025]  Next Review Date: [08/2027]

Physio CYP – Cookie Policy

Effective Date: [08/2025]

1. What are Cookies?

Cookies are small text files that are placed on your computer or mobile device when you visit a website. They are widely used to make websites work more efficiently, as well as to provide information to the owners of the site. Cookies can perform various functions, such as remembering your preferences, analysing how our website is used, and providing relevant advertisements.

2. How We Use Cookies

Our website uses cookies for the following purposes:

• Essential Cookies: These cookies are strictly necessary for the website to function correctly. They enable core functionalities like security, network management, and accessibility. Without these cookies, certain services you have asked for cannot be provided.
• Analytics/Performance Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. This helps us improve the way our website works, for example, by ensuring users find what they are looking for easily. (e.g., Google Analytics).
• Functionality Cookies: These cookies allow our website to remember choices you make (such as your username, language, or the region you are in) and provide enhanced, more personal features. They can also be used to remember changes you have made to text size, fonts, and other parts of web pages that you can customise.
• Targeting/Advertising Cookies: These cookies are used to deliver advertisements more relevant to you and your interests. They are also used to limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns. They are usually placed by advertising networks with our permission. They remember that you have visited a website and this information is shared with other organisations such as advertisers.

3. Types of Cookies We Use

• Session Cookies: These are temporary cookies that remain in the cookie file of your browser only for the duration of your visit and are deleted when you close your browser.
• Persistent Cookies: These remain in the cookie file of your browser for a longer period and are used to remember your preferences or actions across multiple visits.

4. Third-Party Cookies

In addition to our own cookies, we may also use various third-parties cookies to report usage statistics of the service, deliver advertisements on and through the service, and so on.

We do not have control over the cookies placed by third parties. You should check the relevant third-party website for more information about their cookies.

5. Your Cookie Choices and How to Manage Cookies

You have the right to decide whether to accept or reject cookies. You can manage your cookie preferences in the following ways:

• Browser Settings: Most web browsers allow you to control cookies through their settings preferences. You can typically set your browser to:
  • Delete all cookies.
  • Block all cookies.
  • Allow only certain types of cookies.
  • Notify you when a cookie is set.

  Please note that if you choose to block all cookies (including essential cookies), parts of our website may not function correctly or may not be accessible.

• Cookie Consent Tool: [If you use a cookie consent banner/tool, explain how it works here. E.g., “When you first visit our website, you will see a cookie consent banner that allows you to accept or decline different categories of cookies. You can change your preferences at any time by clicking the ‘Cookie Settings’ link [link to your cookie settings interface/re-open banner] at the bottom of our website.”]
• Opt-Out Tools: Some third-party advertisers offer tools to opt-out of their targeted advertising cookies. 

6. Changes to this Cookie Policy

We may update our Cookie Policy from time to time. We will notify you of any changes by posting the new Cookie Policy on this page. We encourage you to review this Cookie Policy periodically for any changes.

7. Contact Us

If you have any questions about our use of cookies, please contact us at:

Physio CYP Ltd, 417a, Birmingham Road, Sutton Coldfield, England, B72 1AU
Email : info@physiocyp.co.uk, Phone : 07417 523 501

© Physio CYP All rights reserved. Registered in England and Wales under the company registration number 16414762
Website by: Five12 Design - together, we create.