Privacy Policy

Impact Physiotherapy | impactphysio.ie

Last updated: 29 Oct 2026

​

1. Introduction

Impact Physiotherapy ("we", "us", "our") is committed to protecting your privacy and handling your personal data lawfully, fairly and transparently. This policy explains what personal data we collect when you visit our website or use our services, why we collect it, how we use and protect it, and what rights you have under the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

​

2. Who We Are (Data Controller)

​

Business name: Impact Physiotherapy

Address: Ireland

Email: info@impactphysio.ie

Phone : 085 1279870

Data Protection contact : James Gutridge

We are the "data controller" of the personal data described in this policy.

​

3. What Personal Data We Collect

3.1 Website visitors

• Technical data such as browser type, device type, operating system, pages visited and time spent on the site

• Cookie and similar technology data (see Section 9)
   

3.2 People who contact us or book an appointment

• Name, address, email address, phone number

• Any information you choose to include in your message or booking form

​

4. How and Why We Use Your Data (Purposes and Legal Bases)

Under GDPR we must have a lawful basis for each use of your personal data. Ours are set out below.

​

Purpose: Responding to enquiries

Data used: Contact details, message content

Legal basis (Art. 6): Legitimate interests (answering your enquiry) or steps taken at your request before a contract

​

Purpose:Website analytics and improvement

Data used: Technical and cookie data

Legal basis (Art. 6): Consent (for non-essential cookies)

​

Purpose: Complying with legal and regulatory obligations (e.g. CORU, Revenue)

Data used: As required

Legal basis (Art. 6): Legal obligation
 

Where we rely on consent, you can withdraw it at any time (see Section 8). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms, and you have the right to object (see Section 8).

 

5. Who We Share Your Data With

We do not sell your personal data and we do not share your data.
 

6. Transfers Outside the European Economic Area

We aim to keep your data within the EEA. If any of our service providers transfer data outside the EEA (for example, to the United States), we ensure appropriate safeguards are in place, such as an EU Commission adequacy decision (including the EU–US Data Privacy Framework where the provider is certified) or Standard Contractual Clauses. You can contact us for details of the safeguards used.
 

7. How Long We Keep Your Data

We keep personal data only as long as necessary for the purposes described above.

​​​​​

Data: Website enquiries 

Retention period: [12 months] from last contact

​

Data:  Website analytics data

Retention period: [14 months]
 

After these periods, data is securely deleted or anonymised. Longer retention may apply if required for a legal claim, regulatory investigation or legal obligation.
 

8. Your Rights

Under GDPR you have the following rights:

• Access: to request a copy of the personal data we hold about you

• Rectification: to have inaccurate or incomplete data corrected

• Erasure: to ask us to delete your data in certain circumstances (this right is limited where we must keep clinical or financial records by law)

• Restriction: to ask us to limit how we use your data in certain circumstances

• Data portability: to receive data you provided to us in a structured, commonly used, machine-readable format, where processing is based on consent or contract and carried out by automated means

• Objection: to object to processing based on legitimate interests, and to object at any time to direct marketing

• Withdraw consent: at any time, where processing is based on consent

• Not be subject to automated decision-making: we do not carry out solely automated decision-making or profiling that produces legal or similarly significant effects on you

To exercise any of these rights, contact us at info@impactphsyio.ie. We may need to verify your identity first. We will respond within one month of receiving your request (extendable by up to two further months for complex requests, in which case we will tell you). There is normally no charge.
 

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

• Strictly necessary cookies are required for the site to function (e.g. security, remembering your cookie choices). These do not require consent.

• Analytics cookies help us understand how visitors use the site. These are used only with your consent.
   

10. Website Forms and Third-Party Links

Information submitted through our contact or booking forms is used only to respond to you and manage your appointment. Please do not include detailed health information in general contact forms or emails; share it with your physiotherapist during your appointment or through our secure booking/clinical systems.

Our website may contain links to third-party sites. We are not responsible for their privacy practices and encourage you to read their policies.
 

11. How We Protect Your Data

We use appropriate technical and organisational measures to protect your data, including:

• Secure, access-controlled electronic clinical records and encrypted devices

• Password protection and restricted access on a need-to-know basis

• Secure (HTTPS) connections on our website

• Confidentiality obligations for all staff and contractors

• Regular software updates and backups

• Procedures for identifying and responding to data breaches

If a personal data breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, and we will report relevant breaches to the Data Protection Commission within 72 hours as required by law.

​

12. Making a Complaint

If you have a concern about how we handle your data, please contact us first at info@impactphysio.ie so we can try to resolve it.

You also have the right to lodge a complaint with the Irish supervisory authority:

Data Protection Commission 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland Website: www.dataprotection.ie
 

13. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website with the "last updated" date shown at the top. If we make significant changes, we will take reasonable steps to notify you.
 

14. Contact Us

For any questions about this policy or your personal data:

Impact Physiotherapy Email: info@impactphysio.ie