Privacy policy

Effective Date: October 1st 2018

Our privacy policy explains how we collect, use, share and protect your personal information. If we update this policy, we’ll post any changes on our App or website.

Section I of this Privacy Policy is intended for the users of this App.

We have created Section II that applies for all users of our website and is intended for the users to get acquainted with their rights under the GDPR.

Apps and websites are operated and owned by Surrey Physio Group Ltd, 409-411 London Rd, Mitcham CR4 4BG

Email: info @ rehabmypatient . com

Tel: 0044 (0) 207 193 6856

SECTION I

Personal data that we collect from You

PLEASE NOTE: We will never pass your personal data (first name, last name, email address) on to another third party.

The personal data we collect from you differs depending on the different functionalities of the website or App you use.

Website/App

  • Email
  • First Name
  • Last Name
  • IP Address

Contact form

  • Name
  • Email

Additional data collected by the App or Website

Rehab My Patient (RMP) collects the following data related to the activity of the subscriber:

  • Time of log in to the website
  • Changes to the information entered in your profile
  • Cookies in order to monitor your activity on the website. You are unable to opt out, as cookies are used for site functionality. If you wish to opt out then just don’t agree to the user licence and terms.

Purposes for the collection and the processing of the data

Registration form of the website

  • We collect your personal data upon registration to our website, in order to create you an account and to be able to provide you with our services.
  • We collect this set of data with the purpose to identify the user of our services.
  • The provision of this data is a contractual requirement, and is necessary to enter into a contract with in case of failure to provide such data you may not be able to use our services;
  • Email Opt-in/Push Notification Opt-in: If you opt in, we will send you automated exercise reminders to encourage you to do your exercises. RMP will not send promotional marketing from any other third party. You are able to opt-out from emails by going to the settings.  

Additional information for your profile (the providing of this information is optional)

  • We provide you the opportunity to develop your profile/account in our system as the provision of this data is completely voluntary. This data will be used solely to supplement the information in your profile.

Additional data collected

  • We are tracking date, time and IP address when a User successfully logs in or fails to login. The purpose for that is to prevent suspicious logins and to have records so we can know if someone is performing unlawful attempts to threaten the security of your data.
  • We are tracking changes in your profile only for our internal statistic purposes.
  • We collect information by using Cookies in order to improve performance of our website, and to get a better user experience. We use the following third party cookies: Google Analytics: to collect anonymized data about visitors to this site. Google Analytics records: The website the visitor came from to get to this site. The kind of computer they are using (Windows, Mac, etc. as well as information like screen resolution, web browser etc.) The visitors general location (eg: London, United Kingdom) Where the visitor clicked on the site and how long they stayed for. In using Google Analytics, we are bound by Google Analytics Terms of Service. You can opt out of Google’s advertising tracking cookie or use a browser plugin to opt out of all Google Analytics tracking software. Cloudflare: We use Cloudflare to help us optimize and protect the websites that run the App. Cloudflare may place a cookie in your browser to help it provide its services. You can read more about this here - Cloudflare Privacy & Security Policy. YouTube cookies: We embed videos from our official YouTube channel using YouTube’s privacy-enhanced mode. This mode may set cookies on your computer once you click on the YouTube video player, but YouTube will not store personally-identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode. Read more at YouTube’s embedding videos information page.

Information related to your performance of the Exercise plan

  • Type of exercise that you have performed
  • Date and time of performance of the exercise
  • Pain level that you have suffered before, during or after the exercise plan
  • Additional notes provided by you for the performance of the exercise
  • Diary logs.

Legal basis for the collection and the processing of the data

Registration form of the website

We process this set of your personal data on the grounds of two legal bases as follows:

  • Your consent to process your personal data, when you have chosen to use our services, as this consent is expressed with your actions when entering your data in our system.
  • The processing is necessary for the performance of a contract (our licence agreement) to which you are a party.

Additional information for your profile (the providing of this information is optional)

  • We process this set of your personal data on the grounds of your consent, when you have chosen to provide us with this data, as this consent is expressed with your actions when entering your data in our system.

Additional data collected by the App

  • We process this set of your personal data on the grounds of our legitimate interest to use your personal data as client of our service in order to improve our service quality and to prevent attempts of fraud (as for instance of unauthorized access to your profile) or other crimes.
  • We process your personal data extracted with the help of cookies on the grounds of your consent.

Information related to your performance of the prescribed Exercise plan

  • We collect information related to your performance of the Exercise plans prescribed to you, only with the purpose to make this information available to the professional who has prescribed this Exercise plan to you via our system. You provide this data completely voluntary and with content on your discretion. We process your personal data related to your performance of the prescribed Exercise plan, on the grounds of your explicit consent expressed in your affirmative action in our consent form and with your actions of entering your personal information in our system. You provide this personal data completely voluntarily and with content on your discretion.

With whom we share your personal data

  • We may share your data with State authorities upon their lawful request, however this would be an exceptional circumstance and highly unlikely to happen.
  • We may share your data with software companies that are responsible for the maintenance of the App (Hosting companies, IT service providers etc.).


For how long will we store your personal data?

  • We will store your personal data for the length of your use or for six (6) years.

SECTION II

Your rights under the GDPR

Please be advised that under the General Data Protection Regulation you are entitled to the following rights:

  • Right to access which is the right to obtain from the App confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data as well as certain information as the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed etc.
  • Right to rectification which is the right to obtain from the App without undue delay the rectification of inaccurate personal data that concerns you.
  • Right to erasure which is the right to obtain from the App the erasure of personal data that concerns you without undue delay and the App shall have the obligation to erase this personal data without undue delay where certain conditions under the GDPR are met. This right may be extended to the “right to be forgotten” which will apply if the App have made some of your personal data public.
  • Right to restriction of processing which is the right to obtain from the App restriction of processing where certain conditions are met.
  • Right to data portability which is the right to receive the personal data that concerns you, which you have provided to the App, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller.
  • Right to objection which is the right to object, on grounds relating to your particular situation, at any time to processing of personal data that concerns you which is based on public interest or legitimate interests, including profiling based on those provisions.
  • You have the right to withdraw your consent for processing of your data where such was given without this to affect the lawfulness of processing based on consent before its withdrawal.
  • You have the right to lodge a complaint related to collection or the processing of your personal data with the relevant supervisory authority.
  • the App does not use automated decision-making or profiling.