Privacy Policy

Data Protection Act 2018 + General Data Protection Register (GDPR)

We, at RehabLab Physiotherapy Limited, are registered and compliant with the Isle of Man Information Commissioners whom regulate data protection in our jurisdiction.

When we first meet you - We will ask you to provide us with the necessary information about yourself to be able to:


  • Conduct a safe and through assessment and treatment session,
  • Develop an appropriate treatment plan
  • Communicate with you effectively regarding future appointments, home exercise programs and other relevant information.
  • Use existing software and agencies (see list below) to be able to deliver a service to you.
  • Communicate with agencies e.g. insurance companies (If you are an insurance funded client)
  • Communicate with other medical professionals about your condition and/or treatment (if required)


You will be asked to consent for the above when completing our registration form on your first appointment.We will obtain your consent via signature and this will be recognised as entering into a service contract. Please be aware, if we are unable to obtain your consent for the above then we may not be able to provide our services to you.

Also: You will be asked to consent, via tick box on our registration form, for our contacting you regarding newsletters, promotions and offers which you may opt-in OR opt-out of.


Existing clients - As an existing client you will have already consented to the above. If you wish to withdraw your consent or are aware you have NOT completed a registration form please do get in touch with us with any queries. (see below)


WE WILL NEVER SHARE YOUR INFORMATION WITH ANYONE WHOM DOES NOT NEED ACCESS.

WE WILL ASK FOR YOUR WRITTEN CONSENT TO SHARE ANY OF YOUR INFORMATION WITH ANYONE WHOM DOES NOT NEED ACCESS.


All clients - We share your information, when appropriate, with the following agencies to be able to deliver our services to you. These agencies have instructed RehabLab Physiotherapy that they are also GDPR compliant.


  • Insurance Companies – Bupa, Bupa International, Aviva and AXA
  • Physiotec.com – whom provided our online exercise program software
  • Individual Law Firms or other insurance agencies – if involved in funding a clients service
  • RehabLab Physiotherapy staff members whom will be your Therapist.


We deliver your information, when appropriate, with:-


  • switch.egress.com – whom operate a secure email messaging service. We use this website to securely send emails to other agencies to protect personal client data
  • We store your information, when appropriate, with the following agencies to be able to deliver our services to you. These agencies have instructed RehabLab Physiotherapy that they are also GDPR compliant.
  • Private Practice Software (PPS) - An electronic records service used for Aviva and AXA clients
  • Mindbody.com - whom provide our booking and payment services
  • Microsoft Onedrive – used to backup our computer records


Your paper records are stored in a locked office. Your electronic records are stored on work-based devices which are secured with passwords and locked in a secure office out of hours.


You have to right to view what personal data we hold about yourself and up-date it accurately.


IT IS A LEGAL REQUIREMENT TO HOLD AND STORE CLIENT DATA FOR 8 YEARS AFTER THE ULTIMATE APPOINTMENT. We will destroy any non-relevant data after this time and you may also contact us to request your record deletion.


Please raise any data inquiries or complaints to our RehabLab Physiotherapy Limited data controller:-


KATE STOBART, 07624 310311, info@rehablabphysio.co.uk, Market Hall, Market Hill, Douglas, Isle of Man, IM1 2BQ.


Share by: