How we use your data, our policies and how you can request your personal information

Privacy notice

ThePhysiobot Limited (hereby Physiobot) is committed to protecting your personal information. As a data controller, we have a responsibility to make sure you know why and how your personal information is being collected in accordance with relevant data protection law.

The primary laws that govern how Physiobot collects and uses personal information (known as “Data”) about you are:

General Data Protection Regulation (GDPR)

Data Protection Act (DPA) (2018)

Overview and purposes

We do not ask for personal information from you. There is no registration form on our website and we do not keep records of your responses to questions within the app or any of the tools on our website.

However, in order for us to provide a comprehensive service to you, we may collect analytics data about how the website and our tools are used. We may collect, store, use, share and dispose of this information. This is known as data processing.

Website cookies

You can decide what cookies are allowed and delete cookies at any time by adjusting settings on your web browser. We do not use cookies to personally identify you or collect information about you as an individual. Find out more about how we use cookies on this website.

What is personal data?

Personal data is specific information about a person that can be used to identify that person either on its own or when it is put together with another piece of information.

Personal data about you is information such as:

• name
• address
• phone numbers
• date of birth
• gender
• email addresses
• IP addresses
• location based data
• financial/bank details

Some types of personal information are more sensitive than others. This information is known as “special category data” and includes information such as:

• race
• ethnic origin
• religious or political beliefs
• trade union membership
• physical and mental health data
• biometric and genetic data (for example, photographs, fingerprints, facial recognition, DNA)
• sexual orientation

Stricter controls are in place to control when and how we can collect, use and store special category data.

Using your personal information

Other than analytics data relating to the use of our website, obtained through cookies, we do not collect or use personal data. Find out more about how we use cookies on this website. If we did obtain your personal information, through correspondence via email or other means just as your voluntary subscription to our mailing list, generally any personal data collected would be stored to ensure that we can maintain records of your activity on our website and provide you with a history of your activity for reference.

We will not keep your personal information for any longer than it is needed, and will dispose of it in a secure way or upon request. The length of time we need to keep information will depend on the purpose for which it is collected.

Sharing your personal Information

We will only ever share your personal data if compelled to do so by law. We will not sell any data. We will only share your personal information where it is necessary, either to comply with the law or where permitted under data protection legislation.

Your rights

You have the following rights in relation to your personal information:

The right to be informed – you have right to know about the collection and use of your personal data.

The right of access – you can request to know what we hold on you along with an explanation for how it is used by making a “Subject Access Request”.

The right to rectification – you have the right to ask us to update, amend or change your information if it is factually inaccurate or incomplete.

The right to erasure – you have the right to ask us to delete your personal information where:

• it can be shown that we no longer have a lawful basis to retain it or the information was collected on the basis of consent only and you have withdrawn your consent.

The right to restrict processing – you have the right to request that we limit using your personal data for specific purposes if you do not believe we have a lawful basis for a particular purpose or where you consider the data to be incorrect. Upon receiving a restriction request, we are obliged to consider our use of the data and provide you with a response.

The right to data portability – you can, in certain circumstances, ask us to provide you with the information you have supplied the Physiobot, where it was obtained on the basis of consent or performance of a contract.

The right to object – you have the right, in certain circumstances, to object to us collecting, using and storing your information. Upon receiving a request of this type, we are required to stop using your data whilst we investigate and provide a response.

Automated decision making and profiling – we will tell you if we make an automated decision, including profiling, with your personal information. If we do this you have the right to ask us to make this decision manually instead.

Data Protection Team

If you have any question about the collection or use of your personal data you can contact us at bot@thephysiobot.com.