Privacy.

Updated 9 October 2026

I’m Matt Todman. I am responsible for the personal information I hold about you. For questions about it, email m@matttodman.com.

What I use and why

I use the contact details and information you give me to answer enquiries, arrange appointments, provide physiotherapy or business advice and manage payment. For patients, this includes relevant health information and clinical notes. Information may also come from a clinician referring you.

The legal bases are taking steps towards or providing the service you request, my legitimate interests in answering enquiries and running my practice, and meeting legal obligations. Health information is used to provide healthcare under my professional duty of confidentiality.

Where it is kept and who sees it

I hold my clinical notes myself in my Google account, protected by two-step verification. I do not give other people routine access to those notes. Google provides the storage and email services. If we communicate on WhatsApp, that service also handles our messages.

Where a referral or your care requires information to be shared with another clinician, I will discuss this with you. Information may also need to be disclosed where the law requires it or to address a serious safeguarding concern. I do not sell your information.

Google, WhatsApp and website hosting providers may process information outside the UK. Their privacy information describes how their services handle data: Google, WhatsApp, OpenAI and Cloudflare.

How long I keep it

Enquiries are kept while needed to answer you and deal with any resulting service, follow-up or dispute. Clinical records are retained for ongoing care and the period required by applicable professional, insurance and legal requirements. This depends on your age, when treatment ended and whether a complaint or claim is ongoing. Contact me for the retention period that applies to your records.

Your choices

You can ask to see your information, correct it or, where the law allows, have it deleted, restrict its use, object to processing or request a portable copy. Some clinical records must be retained, so deletion is not always possible.

Please contact me first if something concerns you. You can also complain to the Information Commissioner’s Office.