Privacy Policy
Last updated: 18/10/2026
The Body Lab Physio (“we”, “us”) is committed to protecting your personal data. This policy explains what information we collect, why we collect it, and your rights under the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018.
Who we are
The Body Lab Physio, AG Physical Therapy Ltd, 11 Oxford Lane, Ranelagh, Dublin 6, D06 TK74.
Email: info@thebodylab.ie · Phone: 01 255 4450
We are the data controller for the personal data described in this policy.
What information we collect
Contact details: your name, email address, phone number, home address (for home visits) and date of birth.
Health information: your medical history, symptoms, assessment findings, treatment notes and progress records.
Booking and payment information: appointment history and payment records. We do not store card details ourselves.
Website information: messages you send through our enquiry forms, plus basic analytics and cookie data when you visit our website.
Why we use your information
To provide physiotherapy assessment and treatment, and to keep accurate clinical records.
To manage appointments, reminders and payments.
To respond to your enquiries.
To provide receipts or reports to your health insurer, but only when you ask us to.
To meet our legal and professional obligations as a CORU-registered health professional.
Our legal basis
Contract: to provide the services you book.
Health data: we process health information for the purposes of providing healthcare, under Article 9(2)(h) of the GDPR, as a professional bound by a duty of confidentiality.
Legal obligation: to keep records as required by law and by our regulator.
Legitimate interests: to run and improve our clinic and website.
Consent: for any marketing emails. You can withdraw your consent at any time.
Who we share your information with
We never sell your data. We only share it where necessary with:
Cliniko, our practice management and booking system (data hosted in the EU).
Squarespace, our website and form provider.
[Payment provider, e.g. Stripe], for processing payments.
Your GP, consultant or insurer, only with your consent or where required for your care.
Authorities, where we are required to by law.
Where a provider processes data outside the European Economic Area, we make sure appropriate safeguards are in place, such as Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep your information
We keep clinical records for [8] years after your last appointment, or until age [25] for patients treated as children, in line with healthcare record-keeping guidance. We keep enquiries that don’t lead to an appointment for up to 12 months.
How we protect your information
Clinical records are stored securely in password-protected systems with restricted access. We only collect what we need.
Your rights
You have the right to:
access the personal data we hold about you
ask us to correct inaccurate data
ask us to delete your data, where we are not legally required to keep it
restrict or object to how we use your data
receive your data in a portable format
withdraw your consent at any time
To exercise any of these rights, email info@thebodylab.ie. We will respond within one month.
Cookies
Our website uses cookies to function properly and to understand how visitors use it. You can manage your cookie preferences in the cookie banner or in your browser settings.
Complaints
If you have concerns about how we handle your data, please contact us first. You also have the right to complain to the Data Protection Commission at www.dataprotection.ie.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page.