Privacy Policy

Introduction

Limitless Orthotics is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

1. Who We Are

Limitless Orthotics (referred to as "we", "us", or "our") is a private orthotics clinic based in Leeds, UK. We provide orthotic services, including assessments, custom-made devices, and consultations. For the purposes of data protection laws, Limitless Orthotics is the "data controller" of the personal data you provide to us.

2. What Information We Collect

We may collect and process the following personal information:

Contact details: Your name, address, email address, and telephone number.

Health information: Medical history, physical assessment data, and treatment plans (with your explicit consent).

Payment information: Billing and financial details for transactions.

Appointment details: Information about your bookings, treatment progress, and any communications with us.

Technical data: Information collected when you use our website (such as IP address, browser type, and usage patterns) through cookies or other tracking technologies.

3. How We Use Your Information

We use your personal data for the following purposes:

To provide orthotic assessments, treatments, and services.

To communicate with you about appointments, treatments, and services.

To process payments and manage billing.

To comply with legal or regulatory obligations.

To improve our services, products, and website functionality.

To maintain records of patient care in line with healthcare and legal requirements.

4. Legal Basis for Processing Your Data

We will only process your personal data where we have a legal basis to do so. The legal bases for processing your data include:

Consent: When you have given us explicit consent to use your data for specific purposes (e.g., sharing health information with other healthcare providers).

Contractual necessity: Where we need your data to provide services or process payments.

Legal obligations: When we are required to comply with legal or regulatory requirements.

Legitimate interests: Where we process data to provide you with effective care and run our business, provided that this is not overridden by your own rights and interests.

5. How We Store and Protect Your Data

We take the security of your personal data seriously. We store your data securely, using appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, or unlawful processing. Your data is stored electronically on secure servers and, where applicable, in physical records in a secure location.

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements.

6. Sharing Your Information

We may share your personal information with:

Healthcare professionals and specialists involved in your care (with your consent).

Third-party service providers (e.g., payment processors, IT service providers) who assist us in running our business.

Regulatory authorities, where required by law (e.g., healthcare regulators, HMRC).

Legal advisors, where necessary to protect our legal rights.

We will not sell or rent your personal data to any third party.

7. Your Rights

You have certain rights regarding your personal data under data protection laws, including:

Right to access: You can request a copy of the personal data we hold about you.

Right to rectification: You can ask us to correct any inaccuracies in your personal data.

Right to erasure: You can request the deletion of your personal data where it is no longer necessary for the purposes we collected it.

Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.

Right to data portability: You can request that we transfer your data to another service provider.

Right to object: You can object to the processing of your data where it is based on our legitimate interests.

If you wish to exercise any of these rights, please contact us using the details provided below.

8. Cookies and Website Use

Our website uses cookies to improve your browsing experience and to gather statistical data. You can control cookie preferences through your browser settings. For more information, please see our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal obligations. Any changes will be posted on our website, and we recommend you review the policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us.

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.