Privacy & Data Policy

1. Information we collect

When you use our appointment form or contact us, we collect your name, phone, email and any health details you voluntarily share in your message. This is limited to what is necessary to schedule and provide your physiotherapy care.

2. How we use your information

Your information is used solely to: schedule, manage and follow up on assessments; coordinate with treating therapists; send reminders; and contact you in an emergency. We do not use your data for marketing unless you separately opt in.

3. Lawful basis — your consent

We rely on your explicit consent, which you give when you tick the consent box. Consent is recorded with a timestamp and the exact text you agreed to, and you may withdraw it at any time by contacting us.

4. Data storage & security

Your records are stored securely on Cloudflare's infrastructure with encryption in transit and at rest, protected by access controls limited to authorised clinical and front-desk staff.

5. Data retention

Appointment records are retained for 90 days after submission, after which they are automatically and permanently deleted. Clinical records are retained per applicable healthcare regulations and securely disposed of thereafter.

6. Sharing

We never sell or share your personal data with third parties for advertising. Data is shared only with our own therapists and service providers bound by confidentiality, solely to deliver the services you requested.

7. Your rights

Under the DPDP Act you have the right to: access your data, request correction, request deletion, withdraw consent, and make a complaint to the Data Protection Board of India. We respond within 30 days.

8. Contact

For any privacy request, contact our data protection officer at care@movewellphysio.in or by phone at +91 98450 22334.