Privacy policy.
Trifecta Physiotherapy & Training Ltd.
Last updated: 11 August 2026
Trifecta Physiotherapy & Training Ltd. (“Trifecta”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains what information we collect, how we use it, who we may share it with, how we protect it and your rights in relation to your personal information.
We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.
1. Who We Are
Trifecta Physiotherapy & Training Ltd. is the organisation responsible for your personal information.
Address:
109b Tildarg Street
Belfast
BT6 8NJ
Email: info.trifecta.pt@gmail.com
Telephone: 07369203330
If you have any questions about how we handle your information, please contact us using the details above.
2. Information We Collect
Depending on the services you use, we may collect and process the following information:
Personal and contact information
Name
Date of birth
Address
Email address
Telephone number
Health and clinical information
Medical history
Current and previous injuries
Symptoms and relevant health information
Information provided during assessment and treatment
Clinical observations and treatment notes
Rehabilitation and exercise programmes
Information relevant to your ongoing care
Health information is classed as special category data under UK data protection law and is therefore subject to additional protections. (ICO)
Other information
Emergency contact details
Appointment and booking information
Payment information and transaction details
Information you provide when contacting us by email, telephone, through our website or in person
We aim to collect only information that is relevant and necessary for the purposes described in this Privacy Policy.
3. How We Collect Your Information
We may collect information directly from you when you:
Book an appointment
Complete an intake or registration form
Attend an appointment
Communicate with us by email, telephone or other direct communication
Contact us through our website
Make a payment
Provide information during an assessment or treatment session
We may also receive relevant information from third parties where this is necessary for your care, for example from an insurer or another healthcare professional, where appropriate.
We use Acuity Scheduling and Splose to assist with appointment booking, client management and clinical records.
4. How We Use Your Information
We use your personal information where necessary to:
Provide physiotherapy assessment, treatment and rehabilitation
Maintain accurate and appropriate clinical records
Plan and manage your treatment
Develop and provide rehabilitation or exercise programmes
Arrange and manage appointments
Communicate with you about your appointments and care
Process payments
Communicate with insurers where applicable
Communicate with other healthcare professionals involved in your care, where appropriate and with your permission
Meet our legal, regulatory, professional and insurance obligations
Manage and administer our business
Respond to enquiries and requests
Send marketing communications where you have specifically opted in to receive them
5. Our Lawful Basis for Processing Your Information
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Performance of a contract – where processing is necessary to provide services you have requested from us.
Legitimate interests – where processing is necessary for the effective operation and administration of our clinic and does not override your rights and interests.
Legal obligation – where we are required to process or retain information to comply with legal, regulatory or professional requirements.
Consent – where we ask for your consent for a particular use of your information, such as certain information sharing or marketing communications.
Where we process health information, which is special category data, we also rely on an appropriate Article 9 condition under the UK GDPR. This may include processing necessary for the provision of health or social care and, where appropriate, explicit consent. (ICO)
6. Sharing Your Information
We treat your personal and health information as confidential.
We may share relevant information where necessary with:
Your GP or consultant, where appropriate and with your consent
Other healthcare professionals involved in your care, with your consent where required
Insurance companies where this is necessary in relation to an insurance-funded appointment or claim
Our accountants and professional advisers where necessary for the operation of our business
Payment providers, including Stripe and Zettle
Our booking and practice management systems, including Acuity Scheduling and Splose
Other service providers who process information on our behalf
We aim to share only the information that is necessary for the relevant purpose.
We will not sell your personal information to third parties.
7. AI-Assisted Clinical Note Taking
We use the Splose AI voice-to-text feature to assist with clinical documentation.
Where this feature is used, audio from a consultation may be processed in real time and converted into written information to assist the treating clinician in preparing clinical notes.
AI-generated information is a supporting tool only. A member of the Trifecta clinical team reviews and checks the information before it is relied upon or incorporated into your clinical record. AI does not independently diagnose, assess or make decisions about your treatment or care.
What happens to the audio?
Splose advises that the audio recording is:
Processed in real time
Not retained after processing by the AI system
Not used to train AI models
Not stored after processing
Subject to a zero-data-retention approach by the AI provider
By default, the audio recording is therefore not retained as part of your client record.
Splose provides an optional setting that allows the clinic to save an audio recording to a client’s file. We will only retain an audio recording where this option has been deliberately enabled.
The written clinical information produced through the process may form part of your clinical record and will therefore be retained in accordance with our clinical record retention requirements.
We use AI to support the administrative and documentation aspects of your care; we do not use AI to make automated decisions about your treatment.
We will make you aware when AI-assisted note taking is being used and will provide you with an opportunity to ask questions or raise any concerns.
8. Data Security
We take appropriate technical and organisational measures to protect your personal information from:
Unauthorised access
Loss or destruction
Accidental disclosure
Unauthorised alteration
Misuse
We use established third-party systems and payment providers, including Splose, Acuity Scheduling, Stripe and Zettle, to support the operation of our clinic.
We take reasonable steps to ensure that third-party providers handling personal information on our behalf provide appropriate security and data protection safeguards.
9. How Long We Keep Your Information
We retain clinical records only for as long as necessary and in accordance with applicable legal, regulatory, professional and insurance requirements.
Our current retention approach is:
Adults: clinical records are retained for 8 years following the last treatment.
Children: clinical records are retained until the child’s 25th birthday, or for at least 8 years following their last treatment where this would result in a later date.
Other information, such as financial and administrative records, may be retained for different periods where required by law or where necessary for legitimate business or legal purposes.
We periodically review the information we hold and securely delete or dispose of information when it is no longer required.
10. Marketing
We may occasionally send information about our services, updates, offers or other relevant communications.
We will only send marketing communications where you have actively opted in to receive them.
Marketing consent is separate from consent to receive healthcare services and is not a condition of receiving treatment from us.
You can withdraw your marketing consent at any time by contacting us or using the unsubscribe option provided in our marketing communications.
11. Children and Young People
We provide services to people under the age of 18.
Where appropriate, we take additional care when collecting and processing children’s personal information and will obtain consent or involve a parent or guardian where required.
We apply the same principles of confidentiality, security and data minimisation to children’s information as we do to adult information, while taking into account their age and understanding.
12. Cookies and Our Website
Our website is:
www.trifectapt.com
We may use cookies and similar technologies where necessary to operate the website, provide functionality and improve the user experience.
Some third-party services, such as embedded booking or website functionality, may place cookies or process technical information when you use our website.
Where cookies require your consent, we will provide appropriate information and allow you to manage your preferences.
You can also control cookies through your browser settings.
13. Your Data Protection Rights
Depending on the circumstances, you have rights under data protection law including the right to:
Request access to the personal information we hold about you
Ask us to correct inaccurate or incomplete information
Ask us to restrict how we process your information in certain circumstances
Object to certain types of processing
Request deletion of your personal information where there is no longer a lawful reason for us to retain it
Withdraw consent where we are relying on consent as our lawful basis
Request information about how your personal information is processed
Some of these rights are subject to legal exceptions. For example, we may need to retain certain clinical or financial records where we have a legal, regulatory or professional obligation to do so.
If you would like to exercise any of your rights, please contact us using the details provided below.
We will respond to valid requests within the timeframe required by applicable data protection law.
14. Complaints
If you have concerns about how we have handled your personal information, we encourage you to contact us first so that we can try to resolve the issue.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection.
Further information about the ICO and how to make a complaint is available on the ICO’s website.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or how we process personal information.
The latest version will be made available through our website, with the date of the latest update shown at the top of the policy.
16. Contact Us
If you have any questions about this Privacy Policy, how we use your information, or wish to exercise your data protection rights, please contact:
Trifecta Physiotherapy & Training Ltd.
109b Tildarg Street
Belfast
BT6 8NJ
Email: info.trifecta.pt@gmail.com
Telephone: 07369203330