Security & Privacy
Protecting your family's personal and clinical information is central to how we operate. This page outlines the measures we have in place to keep your data safe.
Secure UK/EU-hosted storage
All patient records, clinical notes, and uploaded documents are stored securely within European Union data centres. Your data does not leave the UK or EU, ensuring full compliance with UK data protection regulations.
Encryption in transit and at rest
Your data is encrypted both when it is being transmitted to and from our systems, and while it is stored. Passwords are securely hashed and are never stored in plain text.
Restricted access
Access to patient information is strictly limited to authorised staff involved in your child's care. Permissions are managed on a role-by-role basis, and all access is recorded.
Strong staff authentication
All staff accounts are protected by strong password requirements and mandatory two-factor authentication, providing an additional layer of security beyond a password alone.
Secure payment processing
All payments are handled securely through Stripe, an industry-leading payment provider. Your card details are processed directly by Stripe and are never stored on our systems.
Monitoring and audit records
We maintain records of significant system activity to support accountability, security monitoring, and compliance with regulatory requirements.
Backups and data retention
Your data is backed up regularly to protect against unexpected incidents. We retain personal and clinical information only for as long as required by law and professional standards, and securely delete records once they are no longer needed.
Further information
For full details on how we collect, use, and protect your data, including the third-party services we use, please see our Privacy Policy.
Questions?
If you have any questions about how we protect your data, please don't hesitate to get in touch.
Growing Together Physiotherapy
Email: info@growingtogetherphysio.co.uk
Phone: 07481899242