Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Charlie, Foot Health Practitioner (“I”, “me”, “my”) collects, uses and protects your personal data when you use this website or receive my services. I am the data controller for the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018).

1. What data I collect

I may collect and process the following types of information:

• Identity and contact data – name, address, telephone number, email address
• Health and treatment data – information you provide about your medical history, medications, foot conditions, mobility issues and treatment notes (this is special category data)
• Appointment and booking data – dates, times, locations of visits and any related correspondence
• Payment data – limited payment information if you pay by bank transfer or other electronic means
• Technical data – IP address, browser type, device information and website usage data (via cookies or similar technologies)
• Communications – any messages you send via contact forms, email or phone

I only collect data that is necessary for providing my services or operating this website.

2. How I collect your data

• Directly from you when you contact me, book an appointment, complete a form, or during a home visit
• Automatically through cookies and similar technologies when you browse the website
• Occasionally from third parties (for example, a relative or carer acting on your behalf, with your consent)

3. Why I process your data and the lawful bases

I process your data for the following purposes:

Health-related data is processed only with your explicit consent or where necessary for the provision of healthcare or for reasons of substantial public interest, in accordance with UK data protection law.

4. Who I share your data with

I do not sell your data. I may share it only when necessary with:

• Professional indemnity insurers or legal advisers (if required)
• IT or website service providers who process data on my behalf under strict contracts
• Regulatory or law enforcement bodies if legally required
• Other healthcare professionals if you ask me to share information or if there is a serious risk to health or safety

All third parties are required to keep your data secure and use it only for the specified purpose.

5. How long I keep your data

• Treatment and clinical records are normally retained for at least 8 years (or longer if required by professional guidance or law)
• Enquiry and booking data that does not lead to treatment is usually deleted within 12–24 months
• Website technical data is retained for shorter periods in line with cookie settings

When data is no longer needed it is securely deleted or anonymised.

6. Your rights

Under UK data protection law you have the right to:

• Access the personal data I hold about you
• Request correction of inaccurate data
• Request erasure in certain circumstances
• Restrict or object to processing
• Data portability (where applicable)
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact me using the details on the Contact page. I will respond within one month in most cases.

7. Security

I take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. This includes secure storage of paper and electronic records and limiting access to those who need it.

8. International transfers

I do not routinely transfer your data outside the UK. If this ever becomes necessary, I will ensure appropriate safeguards are in place.

9. Changes to this policy

I may update this Privacy Policy from time to time. The latest version will always be available on this page.

10. Contact

If you have any questions about this Privacy Policy or how I handle your data, please contact me via the details on the Contact page of this website. You can also contact the Information Commissioner’s Office at ico.org.uk if you have concerns.