Legal
Privacy policy
Last updated 11 September 2026
This is a demonstration website. Rowanbank Physiotherapy is a fictional clinic created by Tempany Web Studios. Nothing you type into it is sent, stored or emailed anywhere: the booking form runs entirely inside your own browser and the page forgets it the moment you close the tab. The policy below is written the way a real clinic’s would be, so a prospective client can see exactly what they get.
Who we are
Rowanbank Physiotherapy and Sports Injury Clinic, The Old Bank, 14 Mill Wynd, Alloa, Clackmannanshire, FK10 1AB. For anything to do with your personal information, email [email protected] or phone 01632 960 204. On a live site the clinic owner is the data controller.
What we collect, and when
When you send the booking form
- Your name
- Your email address, and your phone number if you give one
- The region you tapped on the figure, or whatever you chose as the reason for the visit
- How long it has been bothering you, and which times of day suit you
- Anything you write in the message box
Keep the message box brief. It is an enquiry form, not a consultation, so please do not put a detailed medical history into it. Everything clinical is taken properly at the appointment, where it belongs on your record rather than in an inbox.
When you come in
A clinical record: your history, what was found on assessment, what treatment was given, your exercise programme, and any correspondence with your GP or consultant. This is health data, which UK GDPR calls special category data and holds to a higher standard. We handle it under Article 9(2)(h), the provision of health care by a regulated professional, and both practitioners work under a duty of confidence as well as the law.
Automatically
Our host keeps standard server logs: IP address, browser type, the page requested and the time. They keep the site running and secure, and the host deletes them on a rolling basis.
Why we use it, and our lawful basis
- To reply to your enquiry and offer you appointment times. Taking steps at your request before entering into a contract.
- To assess and treat you, and to keep your clinical record. Provision of health care, and our legal and professional obligation to keep accurate records.
- To send an appointment reminder. Legitimate interests. Neither of us wants an empty slot.
- To keep the site working and secure. Legitimate interests.
We do not sell your details, we do not share them with advertisers, and we will not add you to a mailing list because you hurt your knee. If we ever start one, you will have to ask to be on it.
How long we keep it
- Enquiries that do not turn into an appointment: 6 months, then deleted.
- Clinical records for adults: 8 years after your last appointment, which is the retention standard for health records in Scotland.
- Clinical records for anyone seen under 16: until their 25th birthday.
- Invoices and payment records: 6 years, because HMRC requires it.
Who else sees it
The two practitioners, and nobody else in the clinic. Your record goes outside it only with your permission, for example a letter to your GP, consultant or insurer, or where the law requires it. On a live site the suppliers who make the clinic work would also process some of it on our behalf, the website host, the email provider and the appointment software, each under a contract that only lets them use it to provide that service. In this demonstration there are none, because nothing leaves your browser.
Cookies and what this page stores
A cookie is a small file a website keeps in your browser. This page uses none at all. It does keep two small values in your browser’s own local storage, which never leave your device and are never sent to us.
| What | Why | How long |
|---|---|---|
| rb-theme | Remembers whether you had the lights up or down, so the page does not fight you on the next visit. This is a functional preference and does not need your consent under PECR. | Until you clear this site’s data |
| rb-consent | Remembers which button you pressed, so the bar stops asking. | Until you clear this site’s data |
| Analytics | On a live site, counts page views so the clinic knows which pages people read. Loaded only if you press Accept. This demonstration loads none at all. | Not set here |
The region you tap on the figure is held in the page while you are reading it and is never stored. There is no advertising cookie, no tracking pixel and no social widget anywhere on this site. Rejecting is exactly as easy as accepting, the two buttons are identical, and rejecting changes nothing about how the page works for you.
You can change your mind from the cookie bar at any time, or by clearing this site’s data in your browser settings.
Your rights
Under UK GDPR you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to us using it. Email [email protected] and we deal with it within a month, free. Clinical records are one of the places where deletion is not always possible: while you are a patient, and for the retention period above, we are required to keep an accurate record of the care we gave.
If you are not happy with how we handled it, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes
If we change how we use your information we update this page and change the date at the top.
Back to the clinicRowanbank Physiotherapy is a demonstration build by Tempany Web Studios. Privacy · Terms · The clinic