Privacy Policy
Last Updated: July 2026
At Evolving Health ("i", "we", "our", "us"), we are committed to protecting your privacy and handling your personal information responsibly and transparently.
This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website or engaging with our services, you agree to the practices described in this Privacy Policy.
Who We Are
Evolving Health is a private healthcare clinic providing physiotherapy, rehabilitation, women's health, sports injury management, and related healthcare services.
If you have any questions about this Privacy Policy or how your personal information is handled, please contact us at:
Evolving Health
Website: www.evolving.health
Email: info@evolving.health
Addresses:
70 Golborne Road
Notting Hill W10 5PS
Information We Collect
Depending on how you interact with us, we may collect any of the following:
Personal Information
For record keeping of patient history
-
Name
-
Date of birth
-
Address
-
Email address
-
Telephone number
-
Emergency contact details
Health Information
To provide safe and appropriate treatment we may collect:
-
Medical history
-
Current symptoms
-
Previous injuries
-
Surgical history
-
Pregnancy and postnatal history (where relevant)
-
Lifestyle information relevant to your care
-
Assessment findings
-
Treatment notes
-
Exercise programmes
-
Progress records
-
Clinical outcomes
Health information is classified as special category personal data under UK GDPR and is afforded additional protection.
Payment Information
If you pay for services directly, we may collect payment details through secure payment providers. We do not store your full payment card information.
Website Information
When you visit our website we may automatically collect:
-
IP address
-
Browser type
-
Device information
-
Pages visited
-
Time spent on our website
-
Cookies and similar technologies
How We Collect Your Information
We collect information when you:
-
Contact us
-
Complete an enquiry form
-
Book an appointment
-
Attend consultations
-
Receive treatment
-
Subscribe to updates (if you choose to)
-
Communicate with us by email or telephone
-
Use our website
We may also receive information from healthcare professionals where you have requested or consented to a referral.
Why We Use Your Information
We use your information to:
-
Provide safe and effective healthcare
-
Assess your suitability for treatment
-
Maintain accurate clinical records
-
Arrange appointments
-
Process payments
-
Respond to enquiries
-
Communicate about your care
-
Improve our services
-
Meet legal and professional obligations
Where you have given consent, we may also send occasional updates about services or events. You can withdraw this consent at any time.
Practice Management
We use Cliniko, a secure cloud-based practice management system, to manage appointments, maintain clinical records, process invoices and communicate with patients.
Cliniko stores data securely and complies with UK GDPR requirements. Information is only accessible to authorised personnel involved in your care.
Online Consultations
Where appropriate, consultations may be carried out remotely using secure video conferencing platforms.
We take reasonable steps to ensure online consultations are conducted securely. However, patients should also ensure they are joining consultations from a private location using a secure internet connection.
Legal Basis for Processing
Under UK GDPR we process your information using one or more of the following legal bases:
Contract
To provide the healthcare services you have requested.
Legal Obligation
To comply with healthcare regulations, taxation requirements and other legal obligations.
Legitimate Interests
To operate and improve our clinic, manage appointments, communicate with patients and maintain business records.
Consent
Where required, for example:
-
Marketing communications
-
Sharing information with another healthcare provider when not otherwise required
-
Certain optional services
Provision of Healthcare
Health information is processed under Article 9 of UK GDPR because it is necessary for the provision of healthcare by a health professional.
Sharing Your Information
We treat all patient information confidentially.
We may share information only where necessary with:
-
We will only share your information where necessary for your care, including with:
-
your GP (with your consent where appropriate)
-
consultants or other healthcare professionals involved in your treatment
-
insurers (where you have requested treatment through an insurer)
-
safeguarding authorities where required by law
-
regulatory or legal bodies where disclosure is legally required
Data Security
We take appropriate technical and organisational measures to protect your information from unauthorised access, loss or misuse.
These measures include secure electronic systems, password protection, encrypted storage where appropriate, and restricted staff access.
Data Retention
Clinical records are retained in accordance with legal and professional guidance.
In most circumstances we retain adult patient records for a minimum of eight years following your last treatment.
Records relating to children may be retained for longer in accordance with NHS and professional guidance.
Financial records are retained for the periods required by HMRC.
Clinical Records
As registered healthcare professionals, we are required to maintain accurate clinical records of assessments, diagnoses, treatment plans and progress notes. These records form part of your healthcare record and are retained in accordance with legal and professional standards.
Cookies
Our website and online booking system use cookies to improve your browsing experience and understand how visitors use our website.
You can control cookies through your browser settings.
For more information, please see our Cookie Policy.
Your Rights
Under UK GDPR you have the right to:
-
Access your personal information
-
Request correction of inaccurate information
-
Request deletion where appropriate
-
Restrict processing
-
Object to certain processing
-
Request transfer of your information where applicable
-
Withdraw consent at any time where processing relies on consent
-
Lodge a complaint with the Information Commissioner's Office (ICO)
More information is available at:
International Transfers
Where any service providers process information outside the UK, we ensure appropriate safeguards are in place to protect your personal data in accordance with UK GDPR.
Children's Privacy
We provide services for both adults and children.
Where required, personal information relating to children will be collected with the involvement and consent of a parent or legal guardian in accordance with applicable legislation and professional guidance.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in legislation, professional guidance or our services.
The latest version will always be available on our website.
Contact Us
If you have any questions regarding this Privacy Policy or your personal information, please contact:
Evolving Health
Website:
www.evolving.health
Email:
info@evolving.health