Privacy Policy

Last updated: July 2026

Park Road Podiatry is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website (https://www.parkroadpodiatry.co.uk) or otherwise interact with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Business name: Park Road Podiatry

Website: https://www.parkroadpodiatry.co.uk

Email: info@parkroadpodiatry.co.uk

Address: 37 Park Road, Redhill, Surrey, RH1 2AH

Data Controller

The data controller (the person responsible for deciding how and why your personal data is processed) is Fiona Farmer of Park Road Podiatry. Fiona is a registered Chiropodist/Podiatrist with the Health and Care Professions Council (HCPC), registration number CH11018. Park Road Podiatry is also registered with the Information Commissioner’s Office (ICO) as a data controller, registration reference ZC206092. If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details above.

Information We Collect

We collect personal data that you voluntarily provide, and some that is collected automatically when you use our website. This may include:

• Contact details — name, email address, telephone number, and postal address
• Enquiry information — anything you tell us via our contact form or by email
• Health & clinical information — because podiatric care involves your health, the information you share in enquiries, assessments and appointments may include special-category data under UK GDPR (for example, details about medical conditions affecting your feet and lower limbs, your medical history, medications, and other health-related information). We also keep clinical notes to support your ongoing care.
• Website usage data — collected via Google Analytics 4 (see below), in line with your cookie choices
• Technical data — IP address, browser type and device information, captured for security and to operate the website

How We Use Your Information

• To respond to your enquiries and provide support
• To provide podiatric care — arranging and carrying out appointments, assessment, treatment, and keeping appropriate clinical notes
• To keep you safe and meet our professional and legal obligations (for example, where there is a serious risk of harm — see “Confidentiality” below)
• To understand how our website is used and to improve it, in line with your cookie choices
• To send you information about our services where you have asked us to, or with your consent
• To protect our website and comply with our legal obligations

Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

• Consent — for analytics cookies (Google Analytics 4) and marketing communications. You can withdraw consent at any time.
• Contract — to provide the podiatric services you have requested.
• Legitimate interests — to operate, secure, and improve our website and respond to enquiries, in a way that does not override your rights.
• Legal obligation — where we must keep records to comply with law (for example, tax and accounting requirements).

Special-category (health) data. Podiatric care involves information about your health, which UK GDPR treats as special-category data needing extra protection. In addition to a lawful basis above, we rely on an Article 9 condition to process it: your explicit consent to receiving treatment, and/or that the processing is necessary for the provision of health or social care and treatment by a professional bound by a duty of confidentiality. Where we need to act to protect someone’s vital interests (a serious risk to life or safety), we may rely on that condition.

Who We Share Your Data With

We do not sell or rent your personal data. We share it only with trusted service providers where necessary to run our practice, and only to the extent required. These may include:

Google Analytics 4

We use Google Analytics 4 (Measurement ID: G-HE31JVYWWE) to understand how visitors use our website (for example, pages visited and time on site). This is only active where you have accepted analytics cookies. We apply Google Consent Mode v2 so that tags respect your choices. Google processes this data under its own privacy policy: https://policies.google.com/privacy

Google reCAPTCHA v3

We use Google reCAPTCHA v3 on our contact form to help protect against spam submissions. reCAPTCHA may set a cookie and collect limited technical data (such as your IP address and browser information), which is processed by Google under its privacy policy: https://policies.google.com/privacy. This is treated as a strictly necessary function to protect the form.

Hosting

Our website is hosted by SiteGround, which processes data on our behalf solely to deliver the website, under appropriate data-processing terms.

Confidentiality & Your Health Records

Your health information shared during podiatric care is treated as confidential. We keep clinical notes securely stored so that others cannot access them, and we do not disclose that you are a patient, or what we discuss, without your consent — with the limited exceptions below.

The limits of confidentiality. In keeping with the HCPC Standards of Conduct, Performance and Ethics and the law, there are rare situations where we may need to share information, usually after discussing it with you wherever it is safe to do so:

• where there is a serious risk of harm to you or to another person;
• where a child or vulnerable adult may be at risk (safeguarding);
• where the law requires disclosure (for example, certain terrorism or money-laundering legislation), or a court orders it.

Secure communication. Please be aware that email, text and telephone are not perfectly secure. We take reasonable steps to protect our contact and will agree with you how best to stay in touch.

How We Protect Your Data

We use appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction, including:

• Encrypted (HTTPS) connections across the website
• Access controls limiting who can view personal data
• Secure, reputable hosting and regular updates

However, no method of transmission over the internet is completely secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

Cookies

Cookies are small files stored on your device. We use them to make this website work and, with your permission, to understand how it is used. When you first visit, our cookie banner lets you Accept All, Reject All, or Customise your choice by category, and you can change or withdraw your consent at any time using the “Manage cookie settings” control.

Category	Status	Purpose
Strictly necessary	Always on (no consent required)	Enable core site functions, remember your cookie choices, and protect our contact form from spam (Google reCAPTCHA).
Analytics	Off until you accept	Google Analytics 4 (G-HE31JVYWWE) cookies that measure and improve the site, set only after you accept analytics cookies.

We apply Google Consent Mode v2 so that Google Analytics tags respect your choices automatically.

You can also manage cookies through your browser settings, though some features may not work correctly if disabled.

How Long We Keep Your Data

• Contact enquiries: up to 1 year from your enquiry, unless an ongoing relationship requires longer
• Patient & clinical records: 8 years after your last appointment (for young people, until they reach 25). Records are then securely destroyed. This period reflects professional guidance and insurance requirements.
• Analytics data: retained in Google Analytics for up to 14 months

Your Rights

Under the UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data in certain circumstances
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a structured, commonly-used format
• Object — object to processing, including for direct marketing
• Withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, contact us using the details above. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO): https://www.ico.org.uk

International Data Transfers

Some of our service providers may process data outside the UK. In particular, Google (which provides Google Analytics 4 and reCAPTCHA v3) may process technical data in the United States under the UK-US Data Bridge (the UK extension to the EU-US Data Privacy Framework). Where data is transferred internationally, we ensure appropriate safeguards are in place to protect your data in line with UK GDPR. You may request further information about these safeguards by contacting us.

Children’s Privacy

We provide podiatric care to patients of all ages, including children. Where a patient is under 16, we will normally seek parental or guardian consent before processing their personal data. If you believe a child’s data has been collected without appropriate consent, please contact us and we will address it.

Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. Any updates will appear on this page with a revised “Last updated” date. We recommend reviewing it periodically.

Contact Us