Last updated: 26 July 2026

This Privacy Policy explains how The Hub Glasgow collects and uses personal information when you visit our websites, contact us, book or pay for services, attend our clinics or studios, or receive care from us.

1. WHO WE ARE

The Hub Glasgow provides podiatry, physiotherapy, sports therapy, rehabilitation, diagnostic and Clinical Pilates services across Glasgow.

Contact: [email protected]

Phone: 0141 363 0306

2. INFORMATION WE MAY COLLECT

Depending on how you use our services, we may collect:

- your name, date of birth and contact details;

- appointment, membership and attendance information;

- health, clinical, referral and treatment information relevant to your care;

- payment and billing information, although card and bank details are normally handled securely by our payment providers;

- messages, call notes, form responses and service enquiries;

- insurer, authorisation and claim information where you use health insurance; and

- technical information about use of our websites, such as device, browser and cookie data.

Health information is special category personal data and receives additional protection.

3. WHERE INFORMATION COMES FROM

We may receive information directly from you, from a parent or guardian, from a referring healthcare professional, from an insurer or employer benefit scheme, or through the booking, payment and communications services you choose to use.

4. HOW WE USE INFORMATION

We use personal information to:

- respond to enquiries and help you choose an appropriate service;

- book, confirm and manage appointments, classes and memberships;

- provide safe clinical assessment, treatment and rehabilitation;

- keep clinical, consent, attendance and billing records;

- process payments, insurance claims and refunds;

- send service messages and, where permitted, relevant updates or marketing;

- improve our services, websites and customer experience;

- protect patients, staff and our systems; and

- meet professional, regulatory, tax, safeguarding and other legal duties.

Our communications may include support from Charlie, our AI assistant. Charlie may provide general information, collect details and route an enquiry. We do not rely on solely automated processing to make a decision that produces a legal or similarly significant effect about your clinical care.

5. OUR LAWFUL BASES

We process personal information only when we have a lawful basis. Depending on the circumstances, this may include taking steps at your request or performing a contract, complying with a legal obligation, pursuing legitimate interests in operating and improving our services, protecting vital interests, or using consent where appropriate.

For health information, we also rely on an applicable special category condition, such as the provision or management of health treatment by professionals subject to confidentiality, or explicit consent where that is the appropriate condition.

6. SHARING INFORMATION

We may share information only where necessary and lawful with:

- members of our clinical, studio and administrative team;

- service providers that support clinical records, booking, classes, communications, hosting, payments and security, including Cliniko, Glofox, GoHighLevel, Stripe and GoCardless where relevant;

- a referrer, insurer or other healthcare professional involved in your care or claim;

- professional advisers, regulators, safeguarding bodies or public authorities where required; and

- another organisation where you ask us to share information or otherwise authorise it.

We do not sell personal information.

7. INTERNATIONAL PROCESSING

Some suppliers may process information outside the UK. Where required, we use recognised safeguards and contractual protections for those transfers.

8. RETENTION

We keep information only for as long as it is needed for the purpose collected and to meet clinical, professional, regulatory, tax and legal obligations. Different records have different retention periods. When information is no longer required, we securely delete or anonymise it where appropriate.

9. SECURITY AND CONFIDENTIALITY

We use access controls, secure systems, staff procedures and other organisational and technical measures to protect information. Clinical information is handled in accordance with professional confidentiality obligations. No online service can guarantee absolute security, so please avoid sending confidential clinical information through an insecure channel where a safer option is available.

10. CHILDREN AND YOUNG PEOPLE

We may provide services to children and young people. Where relevant, we process their information with the involvement of a parent or guardian and in line with applicable consent, confidentiality, safeguarding and clinical requirements.

11. MARKETING AND COOKIES

You can unsubscribe from marketing at any time using the link in a message or by contacting us. Service messages about an appointment, class, payment or account are not marketing.

For information about cookies and how to manage non-essential cookies, please read our Cookie Policy.

12. YOUR RIGHTS

Subject to legal limits and exemptions, you may have the right to ask for access to your personal information, correction, deletion, restriction, portability, or to object to certain uses. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

To exercise a right, email [email protected]. We may need to confirm your identity before responding.

13. COMPLAINTS

Please contact us first so we can try to resolve a concern. You also have the right to complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.

14. CHANGES TO THIS POLICY

We may update this policy when our services, suppliers or legal obligations change. The latest version will be published on this page.