​

As a Chartered Society of Physiotherapy (CSP) registered Physiotherapist, I am committed to protecting your privacy and ensuring that your personal information is handled in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the CSP’s standards of professional practice.

​​

Oxfordshire Breathing Clinic collects and processes personal information only when it is necessary for the safe and effective delivery of physiotherapy services. This may include your contact details, relevant medical history, clinical notes, and any information you choose to share during your assessment or treatment. Health information is classed as special category data and is treated with the highest level of confidentiality.

​

Your information is stored securely using encrypted, password‑protected systems. Your data will never be shared with third parties unless you provide explicit consent, it is required by law, or it is necessary to protect your vital interests. Your information is never sold or used for marketing without your permission.

​

You have the right to access your personal data, request corrections, request deletion in certain circumstances, restrict processing, and withdraw consent where consent is used. To exercise these rights, you can contact me directly at johobbs@oxfordshirebreathingclinic.co.uk.

​

Clinical records are retained in line with legal and professional requirements. Adult physiotherapy records are kept for 8 years after your last appointment. Records for children are kept until age 25 (or 26 if seen at 17). Financial records are kept for 6 years.

​

If you have concerns about how your data is handled, please contact me using the email address above. You also have the right to raise concerns with the Information Commissioner’s Office (ICO) at www.ico.org.uk.