Privacy Policy

Tim Beames is the data controller for personal information collected through https://timbeames.com and through my physiotherapy practice. I am registered with the Health and Care Professions Council and handle clinical information in line with my professional duties of confidentiality.

You can contact me at enquiries@timbeames.com.

Depending on how you use the website or my services, I may collect:

• Your name, email address, telephone number, and postal address
• Enquiry, appointment, and communication details
• Health information you choose to include in an enquiry or provide as part of clinical care
• Clinical, payment, and billing records where applicable
• Basic device, page-view, referral, and performance information from website analytics

The guided symptom reflection does not save or submit your answers. They remain in the open browser tab and are cleared when the tab is closed or the guide is restarted.

• To respond to enquiries and arrange appointments
• To assess, provide, and document physiotherapy services
• To process payments and meet accounting obligations
• To send requested resources or marketing you have consented to
• To maintain, secure, and improve the website
• To meet legal, regulatory, and professional obligations

I process ordinary personal data only where a lawful basis applies, such as consent, performance of a contract, legal obligation, or a legitimate interest that does not override your rights.

Health information is special category data. Where I process it, I also rely on an appropriate UK GDPR Article 9 condition, such as your explicit consent or the provision and management of health care, depending on the context. The website enquiry form asks for explicit consent before any health information you choose to include is sent.

I use selected service providers to operate the website and practice:

• Acuity Scheduling: appointment booking
• FormSpark: enquiry notifications
• GoHighLevel: contact, enquiry, and mailing-list management
• Google Analytics: optional website analytics after consent
• Vercel: website hosting and website analytics
• Sanity: website content management

Each provider processes information under its own terms and privacy notice. Some providers may process data outside the UK. Where that happens, I expect appropriate international transfer safeguards to apply.

I may also share information with healthcare professionals involved in your care when authorised or otherwise legally permitted, and with regulators, insurers, or public authorities where required. I do not sell personal information.

The website uses essential local storage for preferences such as your cookie choice. Google Analytics does not load unless you select “Accept analytics” on the cookie banner.

You can choose “Essential only” and continue using the website. You can also clear the saved choice in your browser settings to make a new selection.

I keep personal information only for as long as it is needed for the purpose collected and to meet applicable clinical, tax, legal, insurance, and professional record-keeping requirements.

I use proportionate technical and organisational measures, including encrypted transport, access controls, managed service providers, and restricted access to practice systems. No online system can be guaranteed completely secure, so please avoid placing unnecessary health detail in a website enquiry.

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict, object to, or receive a portable copy of your personal data. You can also withdraw consent where consent is the basis for processing.

Contact me at enquiries@timbeames.com to make a request. Some rights are subject to legal and professional record-keeping obligations.

If a patient is under 16, I will obtain appropriate parent or guardian involvement and consent before providing care or collecting information, taking account of the young person's capacity and applicable law.

If you have a concern, please contact me first so I can investigate. You also have the right to complain to the Information Commissioner's Office on 0303 123 1113 or at ico.org.uk/make-a-complaint.

I may update this notice when services or legal requirements change. The current version will always appear on this page.