Privacy Policy

Last updated: 19 March 2026

Who we are

This website is operated by Spine Plus Wellness Hub ("we", "us", "our"), trading as Romford Physiotherapy, located at 587 Upper Brentwood Road, Gidea Park, Romford RM2 6LH. Email: [email protected]. Phone: 01708 782026.

What data we collect

When you use our contact form, we collect:

• Your name, email address, and phone number (if provided)
• Your message and service of interest
• The page you submitted from and how you found our site
• A hashed (anonymised) version of your IP address for spam prevention

When you click phone, email, or directions links on our site, we record the type of action, the page, and how you found our site, so we can understand which services are most popular. No personal data is collected from these clicks.

How we use your data

• To respond to your enquiry and arrange appointments
• To send you a confirmation that we received your message
• To understand how visitors use our site so we can improve it

We do not use your data for marketing unless you explicitly opt in. We never sell or share your personal data with third parties for their own marketing purposes.

Lawful basis

We process your data under legitimate interest (responding to your enquiry and improving our services) and consent (you actively submit the contact form and tick the privacy consent checkbox).

Third-party services

• Cloudflare — CDN and security. Cloudflare may process your IP address to deliver content and protect against threats. Cloudflare Privacy Policy
• Google Maps — embedded map on our contact page. Google may set cookies when the map loads. Google Privacy Policy
• Google Fonts — web fonts loaded from Google's servers. Google Privacy Policy
• Resend — email delivery for form submission notifications (server-side only, no tracking pixels). Resend Privacy Policy

Cookies

This site uses only essential cookies:

• cookie_consent — remembers that you dismissed the cookie banner (localStorage, persists until cleared)

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies. Google Maps may set its own cookies when the map loads — see Google's privacy policy above.

Data retention

Contact form submissions are retained for up to 12 months, after which they are deleted. Click tracking data (which contains no personal information) is retained for up to 24 months.

Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — ask us to delete your data ("right to be forgotten")
• Objection — object to our processing of your data
• Portability — request your data in a machine-readable format
• Withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, contact us at [email protected] or call 01708 782026.

Complaints

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO).

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows the latest revision.