PRIVACY POLICY
STRIDE CLINIC
Last Updated: 12 October 2026
Website: www.stride-clinic.co.uk
Clinic Address: Stride Clinic, Nant-y-Coy Mill, Treffgarne, Haverfordwest, Pembrokeshire, SA62 5LR
Email: info@stride-clinic.co.uk
Telephone: 01437 742107
Mobile: 07785 702466
1. INTRODUCTION
Welcome to Stride Clinic.
At Stride Clinic, we are committed to protecting your privacy, maintaining the confidentiality of your personal information, and ensuring that your personal and medical data is handled responsibly, securely and in accordance with applicable data protection legislation.
We understand that when you contact a healthcare provider, make an appointment or receive treatment, you may provide sensitive and confidential information about your health and personal circumstances. Protecting that information is an important part of our professional responsibilities.
This Privacy Policy explains how we collect, use, store, protect, share and retain personal information obtained through our website, www.stride-clinic.co.uk, and through our podiatry and foot healthcare services.
It also explains your legal rights concerning your personal information and how you can exercise those rights.
This Privacy Policy applies to website visitors, prospective patients, existing patients, former patients, individuals making appointments, people contacting the clinic, and other individuals whose personal information is processed in connection with our services.
By using our website or contacting Stride Clinic, you acknowledge that your personal information will be handled as described in this Privacy Policy. Where consent is legally required for a particular activity, we will seek that consent separately.
We are committed to processing personal information fairly, transparently and lawfully.
2. WHO WE ARE
Stride Clinic is a specialist podiatry and foot healthcare clinic based in Treffgarne, near Haverfordwest, Pembrokeshire.
The clinic provides professional podiatry services, including routine foot care, nail treatments, nail surgery, verruca treatments, lower-limb assessments, biomechanical assessments, rehabilitation, orthotic services and other treatments associated with foot health and mobility.
The clinic is led by Sally James, a qualified and HCPC-registered podiatrist.
For the purposes of applicable data protection legislation, Stride Clinic is responsible for determining how and why personal information is processed in connection with its clinical services and business operations.
This responsibility is known as being a data controller.
Our contact details for privacy and data protection enquiries are:
Stride Clinic
Nant-y-Coy Mill
Treffgarne
Haverfordwest
Pembrokeshire
SA62 5LR
Email: info@stride-clinic.co.uk
Telephone: 01437 742107
3. APPLICABLE DATA PROTECTION LEGISLATION
Stride Clinic processes personal information in accordance with applicable United Kingdom data protection legislation, including:
The UK General Data Protection Regulation (UK GDPR).
The Data Protection Act 2018, as amended.
The Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), as amended.
Applicable provisions of the Data (Use and Access) Act 2025.
Relevant professional confidentiality obligations and healthcare recordkeeping requirements.
These laws establish requirements concerning the lawful collection, processing, storage, sharing and protection of personal information.
We recognise our responsibilities to maintain appropriate safeguards, respect individual privacy rights and ensure that confidential medical information receives appropriate protection.
4. PERSONAL INFORMATION WE COLLECT
The personal information we collect depends on your relationship with Stride Clinic and the services you request or receive.
4.1 Personal Identification Information
We may collect your full name, title, date of birth, postal address, telephone number, mobile telephone number, email address and other identifying information necessary for providing our services.
Where appropriate, we may also collect relevant emergency contact details or information concerning a parent, guardian, carer or authorised representative.
4.2 Appointment and Booking Information
When arranging or managing appointments, we may collect information including:
The type of appointment or treatment requested.
Preferred appointment dates and times.
Appointment confirmations, cancellations and rescheduling information.
Relevant booking history.
Communications concerning appointment arrangements.
Information necessary to manage accessibility requirements or reasonable adjustments.
We use this information to organise appointments, communicate with patients and manage the delivery of clinical services.
4.3 Medical and Health Information
As a healthcare provider, Stride Clinic may collect and process information concerning your physical health, medical history and treatment requirements.
This may include details of existing medical conditions, previous injuries, prescribed medication, allergies, relevant surgical history, circulation, neurological symptoms, diabetes-related foot health concerns and other information relevant to podiatric assessment and treatment.
We may also record examination findings, clinical observations, diagnoses, treatment recommendations, treatment plans, referrals, progress notes and details of healthcare services provided.
Depending on the treatment, relevant clinical records may include photographs, foot scans, gait assessments, biomechanical measurements, orthotic prescriptions and other clinical assessment information.
Medical and health information is classified as special category personal data under the UK GDPR and is subject to additional legal safeguards.
We collect and use this information only where necessary for legitimate clinical purposes and where an appropriate legal basis and special category processing condition apply.
4.4 Communication Information
When you communicate with Stride Clinic by email, telephone, website enquiry or another communication method, we may retain relevant information concerning your enquiry.
This may include your contact details, the date and nature of your communication, information you voluntarily provide, and correspondence required to respond to your enquiry or manage your care.
Communications relevant to clinical assessment or treatment may form part of your healthcare records.
4.5 Payment and Financial Information
Where payments are made for appointments, consultations, treatments or other services, we may process information necessary to manage those transactions.
This may include payment amounts, transaction dates, invoices, receipts, billing details, refunds and relevant financial records.
Electronic payments may be handled by payment service providers operating under their own data protection and security obligations.
We do not require patients to provide unnecessary financial information and seek to limit access to payment-related data to those who need it for legitimate business purposes.
4.6 Website and Technical Information
When you access our website, certain technical information may be collected automatically by the website platform and associated technologies.
This may include your Internet Protocol (IP) address, browser type, operating system, device information, pages visited, approximate geographical location derived from technical information, referral sources and information concerning your interaction with the website.
Cookies and similar technologies may also be used to support essential website functions, security, performance and other permitted activities.
Further information is provided in the section concerning cookies and website technologies.
5. HOW WE COLLECT PERSONAL INFORMATION
We collect personal information through several channels.
5.1 Information Provided Directly
We collect information directly when you contact the clinic, make an appointment, complete a patient registration or medical history form, attend a consultation, receive treatment or communicate with us regarding our services.
5.2 Information Collected During Treatment
During clinical appointments, relevant medical information may be recorded as part of your assessment, diagnosis, treatment and ongoing care.
Such information may include examination findings, treatment outcomes, clinical observations and recommendations.
5.3 Information Received from Other Healthcare Professionals
Where appropriate and lawful, we may receive relevant information from general practitioners, consultants, physiotherapists, other healthcare professionals, referring organisations or individuals involved in coordinating your care.
We only use information received from these sources for relevant and lawful purposes.
5.4 Information Provided by Representatives
In appropriate circumstances, information may be provided by a parent, guardian, carer or legally authorised representative.
We take reasonable steps to ensure that information is obtained and disclosed appropriately, taking account of patient confidentiality, legal authority, capacity and the individual's rights.
5.5 Information Collected Through Our Website
Our website platform may automatically collect technical information when visitors access or interact with the website.
This information may be used to deliver website functionality, maintain security, administer website services and support permitted performance monitoring.
6. WHY WE USE YOUR PERSONAL INFORMATION
Stride Clinic processes personal information for purposes connected with delivering professional healthcare services and operating the clinic.
These purposes include arranging and managing appointments, providing clinical consultations, assessing medical conditions, developing treatment plans, delivering podiatry services and maintaining accurate clinical records.
We may use information to communicate with patients about appointments, provide relevant aftercare instructions, arrange follow-up treatment and respond to enquiries.
Personal information may also be used to process payments, maintain financial records, comply with professional responsibilities, respond to complaints, investigate incidents, manage insurance matters and meet applicable legal obligations.
We may process appropriate technical information to maintain website functionality, investigate security concerns and protect our website and business systems.
Information will not be used for a purpose incompatible with the original reason for its collection unless further processing is permitted by law.
Where a new purpose requires additional information or consent, the relevant privacy information will be provided and consent obtained where legally necessary.
7. OUR LEGAL BASES FOR PROCESSING PERSONAL INFORMATION
The UK GDPR requires organisations to identify a lawful basis for processing personal information.
Depending on the particular processing activity, Stride Clinic may rely on one or more of the following legal bases.
7.1 Contractual Necessity – Article 6(1)(b)
We may process personal information where necessary to provide services requested by you or to take steps before entering into an agreement to provide those services.
This includes arranging appointments, administering bookings, communicating about treatment arrangements and managing payment obligations.
7.2 Legal Obligations – Article 6(1)(c)
We may process information where necessary to comply with legal or regulatory responsibilities.
These may include applicable financial recordkeeping obligations, professional obligations, data protection requirements and lawful requests from authorised public bodies.
7.3 Legitimate Interests – Article 6(1)(f)
We may process information where necessary for legitimate business interests, provided those interests are not overridden by your rights and freedoms.
Relevant interests include responding to enquiries, maintaining secure business systems, preventing misuse of services, managing administrative operations and establishing or defending legal claims.
We consider the necessity and potential impact of this processing, particularly where sensitive information may be involved.
7.4 Consent – Article 6(1)(a)
Where a particular use of personal information requires consent, we will seek an appropriate indication of your agreement before undertaking that activity.
Examples may include certain forms of direct marketing, optional website tracking or publication of identifiable patient photographs or testimonials.
Consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
7.5 Vital Interests – Article 6(1)(d)
In exceptional circumstances, we may process information where necessary to protect someone's life or vital interests.
This may arise in an emergency where relevant information needs to be shared to protect an individual's safety.
8. SPECIAL CATEGORY HEALTH INFORMATION
Health and medical information requires additional protection under the UK GDPR.
Stride Clinic processes relevant health information for the purposes of medical assessment, diagnosis, treatment, healthcare provision and the management of associated clinical services.
In addition to an appropriate lawful basis under Article 6, our clinical processing of health information may rely on Article 9(2)(h) of the UK GDPR, which permits processing necessary for medical diagnosis, the provision of health or social care or treatment, or the management of health or social care systems and services.
This processing is subject to applicable professional confidentiality requirements and the relevant conditions under the Data Protection Act 2018.
Other special category conditions may apply in limited circumstances, including explicit consent, the establishment or defence of legal claims or the protection of vital interests where the relevant legal requirements are met.
We recognise that health information is highly sensitive and should be accessed only where there is an appropriate professional or operational need.
Clinical information will not be disclosed for unrelated purposes without an appropriate lawful basis.
9. PATIENT CONFIDENTIALITY
Maintaining patient confidentiality is a fundamental responsibility of Stride Clinic.
Information disclosed during a consultation, examination or treatment is treated as confidential and handled in accordance with applicable professional and legal requirements.
Clinical records may be accessed by authorised healthcare professionals and other authorised individuals only where their responsibilities require access.
Information may be shared with other healthcare professionals involved in your treatment where there is an appropriate lawful basis and where the disclosure is consistent with applicable confidentiality obligations.
Where consent or another legal authorisation is required for disclosure, we will comply with those requirements.
There may be exceptional circumstances in which confidential information must or may lawfully be disclosed, including where disclosure is required by legislation, a valid court order or an overriding legal or public interest justification.
Any such disclosure will be assessed carefully and limited to information reasonably necessary for the relevant purpose.
10. SHARING PERSONAL INFORMATION WITH THIRD PARTIES
Stride Clinic does not sell patients' confidential medical information to third parties.
We may share personal information with organisations or individuals where this is necessary, proportionate and lawful.
Recipients may include healthcare professionals involved in treatment, authorised clinical service providers, appointment and booking service providers, website hosting providers, secure communication providers, payment processors, accountants, professional advisers, insurers, regulatory authorities and other organisations with a legitimate need to receive the information.
Our website is developed and hosted using Wix, which provides website infrastructure and associated online services. Relevant technical and booking information may be processed through Wix services in accordance with the services used and applicable data protection arrangements.
Where external organisations process personal information on our behalf, appropriate contractual arrangements and safeguards are required under applicable data protection legislation.
Third parties acting as independent data controllers are responsible for processing information they receive in accordance with their own legal obligations.
Information will only be shared to the extent necessary for the relevant purpose, unless a broader disclosure is lawfully required.
11. WEBSITE HOSTING AND ONLINE SERVICES
The Stride Clinic website is hosted using Wix website technology.
Website hosting and associated digital services involve the processing of information necessary to deliver website pages, operate online functionality, maintain security and support interactions with visitors.
Where online booking services are available, personal information entered during the booking process may be processed through the relevant booking platform.
Such information may include names, contact information, appointment details and other information requested during the booking process.
Information submitted through online systems will be used for the purposes identified at the point of collection and in accordance with applicable data protection requirements.
Visitors should avoid submitting unnecessary sensitive medical information through general website enquiries where a more appropriate confidential clinical communication method is available.
12. COOKIES AND TRACKING TECHNOLOGIES
Cookies are small files stored on a device when a website is visited.
Our website may use cookies and similar technologies to support functionality, security, visitor preferences and permitted website monitoring.
Essential cookies may be necessary to operate the website, enable navigation, maintain security or provide a service specifically requested by a visitor.
Other cookies, including certain analytics, performance or marketing cookies, require consent unless an applicable legal exemption applies.
Where consent is legally required, optional cookies must not be activated before valid consent has been obtained.
Visitors should be provided with an appropriate opportunity to accept or reject non-essential cookies and to change their preferences.
Browser settings may also allow users to restrict or delete cookies. Disabling certain cookies may affect the availability or performance of website features.
Further information about website cookies and their purposes is provided in our Cookie Policy.
13. MARKETING COMMUNICATIONS
Stride Clinic may provide information concerning its services, clinic developments or other relevant announcements where lawful.
Direct marketing by email, text message or another electronic communication method will be conducted in accordance with applicable data protection legislation and the Privacy and Electronic Communications Regulations.
Where consent is required, marketing communications will only be sent following the appropriate consent.
Where the law permits marketing to existing customers under the relevant conditions, an appropriate opportunity to opt out must be provided.
Individuals may object to direct marketing at any time.
Marketing preferences may be changed by following the relevant unsubscribe instructions or contacting info@stride-clinic.co.uk.
Appointment confirmations, treatment-related messages and essential communications concerning an existing service are distinct from promotional marketing communications.
We do not consider an individual's agreement to receive healthcare treatment to constitute automatic consent to unrelated marketing.
14. PATIENT PHOTOGRAPHS, REVIEWS AND TESTIMONIALS
Patient photographs, clinical images, feedback and testimonials may contain personal information.
Images collected for clinical purposes are handled as part of the relevant medical records where they identify or relate to an individual.
Clinical photographs may be used to document medical conditions, monitor treatment progress or support professional assessment where appropriate and lawful.
Identifiable patient photographs and testimonials will not be published for promotional purposes without an appropriate lawful basis and any necessary permission.
Where consent is relied upon, individuals will be informed about the proposed use of their information and may withdraw that consent.
Withdrawal may not be capable of reversing previous lawful publications or disclosures that have already occurred, but further processing based on withdrawn consent will cease.
We aim to respect patient dignity, confidentiality and personal preferences when handling identifiable images and feedback.
15. HOW WE PROTECT PERSONAL INFORMATION
Stride Clinic recognises the importance of protecting personal information against unauthorised access, accidental loss, unlawful disclosure, alteration, destruction and misuse.
We are committed to maintaining appropriate technical and organisational safeguards proportionate to the nature and sensitivity of the information being processed.
These safeguards may include access controls, appropriate authentication procedures, secure storage arrangements, confidentiality requirements, restricted access to clinical records, secure digital services and appropriate measures for protecting electronic communications.
Access to patient information should be limited to authorised individuals who require it for legitimate clinical, administrative or legal purposes.
We take the sensitivity of medical information into account when assessing information security requirements.
Although appropriate precautions are taken, no method of electronic transmission or digital storage can be guaranteed to eliminate every possible security risk.
Any suspected personal data breach will be assessed in accordance with applicable data protection requirements.
Where required by law, relevant breaches will be reported to the Information Commissioner's Office and affected individuals will be notified.
16. HOW LONG WE KEEP PERSONAL INFORMATION
We retain personal information only for as long as necessary for the purposes for which it was collected, or where continued retention is required or permitted by law.
Different categories of information may be subject to different retention requirements.
Clinical and medical records are retained in accordance with relevant professional guidance, applicable healthcare recordkeeping requirements and the legal or clinical circumstances requiring their preservation.
The appropriate retention period may depend on factors including the age of the patient, the nature of treatment, the date of the last clinical contact and the need to maintain records for continuing care, legal claims or professional accountability.
Appointment and communication records are retained for as long as necessary to manage the relevant services and any associated legitimate requirements.
Financial records are retained in accordance with applicable tax, accounting and statutory recordkeeping obligations.
Website enquiry information that does not form part of a clinical record is retained only for an appropriate period having regard to the purpose of the enquiry and any necessary follow-up.
Where information is no longer required, it will be securely deleted, destroyed or anonymised as appropriate.
Requests for deletion will be considered in accordance with the individual's legal rights and any applicable duties requiring records to be retained.
17. INTERNATIONAL DATA TRANSFERS
Some digital service providers and technology suppliers may process or store personal information outside the United Kingdom.
This may include providers involved in website hosting, digital communications, appointment systems or other necessary business technology.
Where personal information is transferred internationally and the UK GDPR's international transfer rules apply, the relevant transfer must be supported by an appropriate legal mechanism.
Such mechanisms may include UK adequacy regulations or appropriate contractual safeguards, including the UK International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses, as applicable.
Additional safeguards and transfer risk assessments may be required depending on the circumstances.
Individuals may contact the clinic for further information about international transfers affecting their personal information and the safeguards that apply.
18. YOUR DATA PROTECTION RIGHTS
Under the UK GDPR and the Data Protection Act 2018, individuals have several rights concerning their personal information.
These rights are subject to applicable legal conditions, limitations and exemptions.
18.1 Right to Be Informed
You have the right to receive clear and transparent information about how your personal information is collected and used.
This Privacy Policy forms part of the information provided to explain our data processing activities.
18.2 Right of Access
You may request confirmation of whether we process your personal information and, where applicable, request access to that information.
This is commonly known as a Subject Access Request.
Requests will be handled in accordance with applicable data protection legislation.
18.3 Right to Rectification
You may request the correction of inaccurate personal information or the completion of information that is incomplete.
Where a clinical record contains an opinion or professional assessment, amendments will be considered in accordance with the rules governing accurate and appropriate recordkeeping.
18.4 Right to Erasure
You may request the deletion of personal information in circumstances where the right to erasure applies.
This right is not absolute.
Certain information, particularly medical records, may need to be retained where necessary to comply with legal obligations, provide healthcare or establish, exercise or defend legal claims.
18.5 Right to Restrict Processing
You may request that the processing of your personal information is restricted in certain circumstances.
18.6 Right to Data Portability
Where the relevant legal conditions are satisfied, you may request certain personal information in a structured, commonly used and machine-readable format.
18.7 Right to Object
You have the right to object to processing based on legitimate interests, subject to applicable legal conditions.
You also have the right to object to the use of your personal information for direct marketing at any time.
An objection to direct marketing will be respected in accordance with applicable law.
18.8 Rights Relating to Automated Decision-Making
Individuals have rights concerning certain decisions made solely through automated processing where those decisions produce legal or similarly significant effects.
Any processing of this nature must comply with the additional safeguards required by applicable data protection legislation.
18.9 Right to Withdraw Consent
Where processing relies on your consent, you may withdraw that consent at any time.
Withdrawal does not affect processing that was lawful before the consent was withdrawn.
19. HOW TO EXERCISE YOUR RIGHTS
If you wish to exercise a data protection right, please contact Stride Clinic using the details below.
Email: info@stride-clinic.co.uk
Postal Address:
Stride Clinic
Nant-y-Coy Mill
Treffgarne
Haverfordwest
Pembrokeshire
SA62 5LR
Please provide enough information to enable us to understand and respond to your request.
We may need to verify your identity before releasing confidential personal or medical information.
This helps protect patient privacy and prevent unauthorised disclosures.
Requests will normally be responded to within one calendar month, subject to the applicable legal provisions concerning extensions, clarification and permitted exemptions.
There is normally no charge for exercising your data protection rights, although the law permits reasonable fees or refusal in certain limited circumstances.
20. CHILDREN AND YOUNG PEOPLE
Stride Clinic recognises that children and young people are entitled to appropriate privacy protection.
Where clinical services are provided to a child or young person, personal information may be collected and processed for the purposes of assessment, treatment, clinical recordkeeping and relevant healthcare administration.
Information about parents, guardians or carers may also be processed where necessary.
The collection and disclosure of information relating to children will take account of applicable legal requirements, professional confidentiality obligations, parental responsibility, the child's capacity and the circumstances of the treatment.
A young person's personal information will not automatically be disclosed to a parent or guardian where the young person has a legal right to confidentiality.
Requests for access to a child's clinical information will be assessed in accordance with applicable law and professional responsibilities.
21. THIRD-PARTY WEBSITES
Our website may contain links to external websites, services or platforms.
These may include online booking providers, professional organisations, social media platforms or other relevant services.
External websites operate independently and may have their own privacy policies, cookie practices and data processing arrangements.
Stride Clinic is not responsible for the privacy practices of independent third-party websites that it does not control.
Visitors are encouraged to review the privacy information provided by external websites before supplying personal information.
22. PROVIDING ACCURATE INFORMATION
Patients are encouraged to provide accurate and relevant information when booking appointments or receiving clinical treatment.
Accurate medical information is important for appropriate assessment, safe treatment planning and effective communication.
Where relevant information is necessary to provide a requested service, failure to provide that information may prevent or limit the clinic's ability to carry out an appropriate assessment or deliver a particular treatment safely.
Individuals should inform the clinic where their contact details, medical circumstances or other relevant information change.
We take reasonable steps to maintain accurate records and to update information where appropriate.
23. DATA PROTECTION COMPLAINTS
Stride Clinic takes privacy and data protection concerns seriously.
If you believe that your personal information has been handled incorrectly, disclosed without appropriate authority, retained unnecessarily or processed in a way that does not comply with applicable legislation, you may contact us to raise your concerns.
We will consider data protection complaints and respond in accordance with applicable legal requirements.
You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the United Kingdom's independent authority responsible for upholding information rights.
Information Commissioner's Office
Website: www.ico.org.uk
Telephone: 0303 123 1113
Further information about making a complaint is available through the ICO's official website.
You may contact the ICO if you are dissatisfied with how your personal information has been handled or how your data protection complaint has been addressed.
24. CHANGES TO THIS PRIVACY POLICY
Stride Clinic may update this Privacy Policy to reflect changes in applicable legislation, regulatory guidance, clinical operations, technology, website functionality or the way personal information is processed.
Any updated Privacy Policy will be published on www.stride-clinic.co.uk with an appropriate revision date.
Where changes materially affect how personal information is processed, additional notification or consent will be provided where legally required.
We encourage website visitors and patients to review this Privacy Policy periodically.
Continued use of the website does not replace any consent that is required by law for a particular processing activity.
25. CONTACT INFORMATION
For enquiries concerning this Privacy Policy, patient confidentiality, personal information, data protection rights or the handling of personal or medical records, please contact:
STRIDE CLINIC
Nant-y-Coy Mill
Treffgarne
Haverfordwest
Pembrokeshire
SA62 5LR
Email: info@stride-clinic.co.uk
Telephone: 01437 742107
Mobile: 07785 702466
Website: www.stride-clinic.co.uk
Stride Clinic is committed to respecting individual privacy, maintaining professional confidentiality and handling personal and medical information responsibly.
Privacy Policy Last Updated: 12 October 2026
© 2026 Stride Clinic. All Rights Reserved.