Privacy policy
Last updated 23/07/2027
1.1 Who we are
ROOT Physio is operated by Theodore Ntetsikas LTD, a company registered in England and Wales under company number 16194187, with registered office at 8 Heyford Ave, SW8 1ED, London, UK (“ROOT Physio”, “we”, “us”, “our”). We operate clinics at Fleet Street and Vauxhall, London.
We are the data controller for personal information collected through rootphysio.co.uk (the “site”). This policy explains what we collect, why, and how we look after it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. 2. What information we collect
2.1 Information you give us directly
- Contact details submitted through our website contact or enquiry forms (name, email address, phone number, and the content of your message).
- Information you provide if you book an appointment. Bookings are handled through our booking partner, Zanda, which opens in an embedded window on our site. We do not collect or store the health or medical details you may provide as part of booking or attending an appointment — the website itself only asks for basic contact and scheduling details necessary to make a booking.
- Any details you provide if you contact us by phone, email, or WhatsApp.
2.2 Information collected automatically
- Standard technical data such as IP address, browser type, device type, and pages visited, collected via cookies and similar technologies.
- Analytics data via Google Analytics, which helps us understand how visitors use the site (e.g. which pages are viewed, how long for, and general location at a regional level).
- Advertising data via the Meta (Facebook/Instagram) pixel and Google Ads tracking, used to measure the effectiveness of our advertising and to show relevant ads to people who have visited our site.
Cookie-based tools only run with your consent, managed through the cookie banner on our site (we use CookieYes to manage this). You can change your preferences at any time — see Section 6.
4. Our legal basis for processing
- Consent — for non-essential cookies, analytics, and advertising tracking. You can withdraw consent at any time via the cookie settings.
- Legitimate interests — for responding to enquiries and keeping the site secure and functioning.
- Contract — where processing is necessary to provide a service you have requested, such as a booking.
We do not collect special category data (such as health information) through the website. Any health information you provide as part of your physiotherapy treatment is collected separately, in clinic, and is handled under our clinical record-keeping and confidentiality obligations as a healthcare provider, not under this website privacy policy.
5. Who we share information with
- Zanda — our booking software provider, who processes booking and scheduling details on our behalf.
- Google — for website analytics (Google Analytics) and advertising (Google Ads). Google’s own privacy policy applies to its processing of this data.
- Meta — for advertising measurement and targeting (Meta pixel). Meta’s own privacy policy applies to its processing of this data.
- Service providers who support our website hosting, security, and operation.
We do not sell your personal information to third parties.
6. Cookies
Our site uses cookies and similar technologies. Essential cookies are required for the site to function and do not require consent. Non-essential cookies (analytics and advertising) only run after you give consent through our cookie banner.
- Essential cookies — required for core site functionality.
- Analytics cookies — Google Analytics, used to understand site usage.
- Advertising cookies — Meta pixel and Google Ads, used to measure and personalise advertising.
You can review or change your cookie preferences at any time using the cookie settings link on our site, or by adjusting your browser settings.
7. How long we keep your information
- Contact form enquiries: kept for as long as needed to deal with your enquiry, and a reasonable period afterwards in case of follow-up, then deleted.
- Booking and scheduling data: retained in line with Zanda’s data retention practices and our own operational needs.
- Analytics data: retained in line with Google Analytics’ default retention settings unless we configure otherwise.
Clinical and health records created during treatment are retained separately, in line with professional and regulatory requirements for healthcare providers, not under this policy.
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal information we hold about you.
- Ask us to correct inaccurate information.
- Ask us to delete your information, in certain circumstances.
- Object to or restrict certain processing.
- Withdraw consent at any time where we rely on consent (e.g. cookies).
- Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
To exercise any of these rights, contact us at info@rootphysio.co.uk.
9. Children
Our website is not directed at children, and we do not knowingly collect personal information from children under the age of 16. If a parent or legal guardian believes that we have inadvertently collected personal information of a child, please contact us immediately, and we will take steps to delete that information from our records. If parents or legal guardians have provided us with personal information of their children, we apply the terms above.
10. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top shows when it was last revised.
11. Contact us
If you have any questions about this policy or how we handle your information, contact us at:
Email: Info@rootphysio.co.uk
Fleet Street clinic: 167 Fleet St, London EC4A 2EA
Vauxhall clinic: 8 Tinworth St, London SE11 5EJ