Clinic Name: Kids Physiotherapy Waterford
Practitioner: Miley Joyce, Chartered Physiotherapist
Contact Email: kidsphysiotherapywaterford@gmail.com
Effective Date: 09/01/2026

1. Purpose of This Policy
This Privacy & Consent Policy explains how we collect, use, store, and protect personal data when you or your child attends our clinic. It also outlines how consent for assessment and treatment is obtained and respected.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and Irish data protection law.

2. Who We Work With
We provide physiotherapy services to children and young people. In most cases, personal data is provided by a parent or legal guardian and relates to their child.

3. What Information We Collect
We collect only the information necessary to provide safe and effective physiotherapy services. This may include:

• Child’s name, date of birth, and contact details
• Parent/guardian contact information
• Medical and developmental history
• Assessment findings and treatment notes
• Reports, goal plans, and progress updates
• Appointment dates, attendance records, and correspondence

4. How We Use This Information
Your information is used for the following purposes:

• Assessment and treatment planning
• Monitoring progress and outcomes
• Communicating with parents/guardians about appointments and follow-up
• Preparing reports or summaries (e.g. for parents, schools, or other professionals, where consent is given)
• Meeting professional, legal, and insurance obligations

We do not use your information for marketing purposes without explicit consent.

5. Legal Basis for Processing Data
Under GDPR, we rely on the following legal bases:

• Consent: for assessment, treatment, and sharing information with third parties
• Provision of healthcare: processing necessary for physiotherapy services
• Legal obligation: record keeping and professional standards

Consent can be withdrawn at any time, without affecting care already provided.

6. Consent for Assessment and Treatment
By attending the clinic and engaging in physiotherapy services, parents/guardians provide informed consent for:

• Physiotherapy assessment and treatment
• Record keeping in line with professional standards
• Reasonable communication related to care

Assessment may include observation of movement, gross and fine motor testing, and discussion of medical and developmental history. Treatment may involve play-based interventions, guided exercises, or hands-on physiotherapy techniques as appropriate for your child’s needs.

Consent is viewed as an ongoing process. Parents/guardians are encouraged to ask questions, raise concerns, or withdraw consent at any time.

7. Communication by Email
We commonly communicate with parents/guardians via email regarding:

• Appointment scheduling and reminders
• Follow-up advice
• Reports or summaries of assessment or progress

Emails may include attachments such as reports. Where appropriate, documents may be password-protected. If you prefer an alternative method of communication, please let us know.

8. Sharing Information with Others
Information is shared only when necessary and with appropriate consent. This may include:

• Parents or legal guardians
• Schools or early years settings
• Other healthcare professionals involved in care

We do not share personal data with third parties without consent unless required by law.

9. Data Storage and Security
We take appropriate measures to protect personal data, including:

• Secure password-protected devices and systems
• Professional email accounts with security features enabled
• Limited access to records
• Secure storage of electronic and paper records

Records are retained in line with professional and legal requirements. Typically, records are kept for a minimum of 7 years or as required by professional standards.

10. Your Rights Under GDPR
You have the right to:

• Access your personal data
• Request correction of inaccurate information
• Request deletion of data (where appropriate)
• Restrict or object to certain processing
• Withdraw consent
• Make a complaint to the Data Protection Commission (www.dataprotection.ie)

Requests can be made by contacting us using the details above.

11. Updates to This Policy
This policy may be updated from time to time. The most current version will be available on our website or provided on request.