Last updated: 08 February 2026
Introduction
I am a podiatrist based in the UK, providing foot care and treatment services. This privacy policy explains how I handle your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
I take your privacy seriously. As a healthcare provider, I only collect and use personal information that is necessary for providing your treatment and managing your care.
I do not collect or use your personal information for marketing purposes. I do not send promotional emails, newsletters, or any other marketing communications.
What personal information I collect
I collect information directly from you when you contact me to book an appointment, attend a consultation, or receive treatment. This may include:
- your name and contact details (such as phone number, email address, and postal address)
- date of birth
- relevant medical history and details about your foot health or condition
- notes about your consultations and treatment
I only collect health information that is necessary for your care.
How I use your personal information
I use your information to:
- provide podiatry treatment and advice
- manage appointments
- keep accurate clinical records
- comply with my professional and legal obligations as a registered healthcare professional
Legal basis for processing
I process your general personal information (such as name and contact details) on the basis that it is necessary for performing the contract to provide healthcare services to you, or because it is in my legitimate interests to manage your care safely and effectively.
Your health information is special category data under UK GDPR. I process this on the basis that it is necessary for the purposes of preventive or occupational medicine, medical diagnosis, and the provision of health care or treatment.
Sharing your information
I only share your information when necessary and always in accordance with data protection law. This may include:
- referring you to another healthcare professional (such as your GP or a specialist) with your knowledge
- disclosing information if required by law or by regulatory bodies (such as the Health and Care Professions Council)
I do not share your information with third parties for marketing or commercial purposes.
Data retention
I keep your clinical records for as long as necessary to meet my professional and legal requirements. Adult patient records are normally retained for 8 years after your last appointment, or longer if required by specific circumstances. After this period, records are securely destroyed.
Your rights
Under UK data protection law, you have the following rights regarding your personal information:
- the right to be informed about how I use it
- the right to access a copy of the information I hold about you
- the right to have inaccurate information corrected
- the right to have information erased in certain circumstances (though this may not apply to health records needed for ongoing care or legal reasons)
- the right to restrict processing in certain circumstances
- the right to object to processing in certain circumstances
Some of these rights are limited when applied to health records. If you wish to exercise any of these rights, please contact me using the details below.
Data security
I have appropriate technical and organisational measures in place to keep your information secure. Paper records are stored in locked cabinets, and electronic records are protected by passwords and encryption where appropriate.
Contact me
If you have any questions about this privacy policy or how I handle your information, please contact:
Rachael Allen
07865 790 448
email@rachaelallen.uk
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if you are unhappy with how I have handled your personal information.
Changes to this policy
I may update this privacy policy from time to time. Any changes will be posted here and, where appropriate, notified to you directly.