Last updated: September 2026.
Who we are
This privacy policy explains how Advanced Footcare Group ("we", "us", "our"), a podiatry and chiropody practice at the Medwyn Centre, Reigate Road, Dorking, RH4 1SD, collects, uses and protects your personal information, and the rights you have over it. It covers our practice, our premises and our website at advancedfootcaregroup.co.uk.
We are the data controller for the personal information we hold. If you have any questions about your data or this policy, you can contact us by email at advancedcaregroup@outlook.com or by phone on 01306 883 332.
The law we follow
We handle personal data in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As a healthcare provider, we also follow our professional confidentiality obligations under the Health and Care Professions Council (HCPC).
The information we collect
- Patient and health information: your contact details, medical and foot-health history, assessments, treatment notes and related clinical records.
- Enquiry information: your name, email, phone number and message when you contact us through the website, by email or by phone.
- Appointment information: the details needed to book and manage your appointment.
- Website information: limited technical data (such as your device and browser type) needed to serve the website securely, and analytics data collected through Google Analytics to help us understand how the site is used.
Why we use it, and our lawful basis
We use your information to provide and manage your podiatric care, to respond to enquiries, to arrange appointments, and to keep accurate clinical and financial records. Our lawful bases under the UK GDPR are consent and the performance of a contract for enquiries and appointments, our legitimate interests in running the practice safely, and, for your health information, Article 9(2)(h) UK GDPR, the provision of health care and treatment, alongside our legal and professional obligations.
Confidentiality and sharing
Our patients' privacy is very important to us. As healthcare practitioners we respect the confidentiality of the personal information we learn and hold about you and your health. All staff are trained in and bound by strict confidentiality codes of professional conduct, and your data is accessed by staff only as relevant to your care.
We would share your information with NHS referrers, GPs, consultants or other health professionals only where it is relevant to your treatment, and with your permission. We may occasionally be asked to share information with your insurer, employer, solicitor or another relevant party, but only with your written permission. We do not sell your personal information to anyone.
Who else processes your data
We use a small number of trusted third parties to run the practice and website. They act as our data processors under contract and only use your data on our instructions. These include Google, for Google Analytics, Google Tag Manager and Google Search Console, which help us measure, manage and improve the site; Mailchimp, if you subscribe to our email newsletter; and Netlify, which hosts the website. Each only uses your data on our instructions.
Storing and transferring your data
Your clinical records are held on our practice systems. Some of our website and marketing providers, such as Google, Mailchimp and Netlify, may process limited data outside the UK. Where they do, we rely on appropriate safeguards recognised under UK data protection law, such as UK adequacy regulations or the UK International Data Transfer Agreement.
Cookies
This website uses essential cookies that are needed for it to work, and non-essential cookies that are only set with your consent. These include analytics cookies through Google Analytics, which help us understand how visitors use the site, and tags managed through Google Tag Manager, which may include analytics and, where enabled, marketing or remarketing tags. You give consent through the cookie banner when you first visit, and you can change or withdraw it at any time. You can also block or delete cookies through your browser settings. For more information you can read Google's privacy policy.
Email newsletter
If you choose to subscribe to our email newsletter, we use Mailchimp to send it and to manage the mailing list. We use it only to share foot-health information and practice news with people who have opted in, and you can unsubscribe at any time using the link in any newsletter or by emailing advancedcaregroup@outlook.com.
How long we keep your information
All case information is securely held on our software system for a minimum of 8 years, as required by our professional body, the Health and Care Professions Council. Financial records such as card payment slips are kept securely for a minimum of 18 months before being confidentially shredded. Other financial records, for example insurance company invoice statements, are kept for the statutory 7 years.
Your rights
Under the UK GDPR you have the right to:
- be informed about how your data is used;
- access the personal data we hold about you. Patients are entitled to a copy of their own records, and an electronic copy can be provided on request at no charge;
- ask us to correct information that is inaccurate or incomplete;
- ask us to erase your data, where there is no overriding legal or clinical reason to keep it;
- ask us to restrict or object to how we use your data;
- data portability; and
- withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, contact us at advancedcaregroup@outlook.com or on 01306 883 332.
Complaints
If you have a concern about how we handle your personal data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.
External links and social media
Our website may link to other websites, and we take part on social media platforms such as Facebook and X. We are not responsible for the privacy practices of those external sites and platforms, so we advise you to read their own privacy policies and to share personal details on them with care.
Changes to this policy
We may update this privacy policy from time to time. Any changes will be published on this page with a revised date shown above.