Privacy Policy

The Joint Mech Physiotherapy Clinic is run by Balasubramanian Sankaran, a chartered physiotherapist based in Rugby, Warwickshire. He is the data controller for the information you send through this website — meaning he decides how and why it is used and is responsible for looking after it.

Email admin@thejointmech.co.uk or call +44 7438 416150.

The only personal information this website collects is what you type into the appointment request form:

• Your name.
• Your email address.
• Your phone number.
• The subject of your enquiry.
• A short description of your pain or symptoms.
• Your preferred date and approximate time for an appointment.

You do not need to create an account, and the website does not ask for your address, date of birth, or payment details. Please only include what is needed for us to understand your enquiry.

The description of your pain or symptoms is health information provided in an appointment enquiry. Because this information relates to your health, it is treated as “special-category” data under UK data protection law and is handled confidentially. An appointment enquiry is not, by itself, your formal clinical record.

We use your details for one purpose: to respond to your appointment request, arrange your appointment, and prepare for it.

• Article 6(1)(b) UK GDPR — processing is necessary to take steps at your request before entering into a contract for physiotherapy care (and, once you are a patient, to perform that contract).
• Article 9(2)(h) UK GDPR, together with Schedule 1 Part 1 paragraph 2 of the Data Protection Act 2018 — processing of health information is necessary for the provision of health care and treatment, and is carried out by a health professional who owes a duty of confidentiality.

We do not rely on consent as the lawful basis for handling your appointment enquiry, so withdrawing consent is not the mechanism for stopping it — instead, see your rights below. Consent is used only for optional website analytics, which is a separate matter covered in the Cookie Policy.

Balasubramanian Sankaran is the only person at the clinic who reads appointment enquiries. We never sell your information, never share it for marketing, and never use it to build a profile about you.

We also use a small number of technology suppliers to host, store and transmit the information on our behalf, under contract and only on our instructions:

• Vercel Inc. — hosts this website and delivers its pages, and provides the optional visitor-count analytics.
• Supabase, via the Lovable Cloud platform — stores appointment requests in our database.
• The Lovable email delivery service — sends the notification email containing your enquiry to our clinic address.
• Google (Google Fonts) — serves the typefaces used on our pages; your browser’s request includes your IP address. No form information is sent to Google.

If you choose to contact us by WhatsApp using the button on this site, that conversation takes place in WhatsApp and is subject to WhatsApp’s own privacy terms.

Our hosting, database and email suppliers are international companies and some processing may take place outside the UK. Where that happens, transfers are covered by the suppliers’ standard data protection safeguards — such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses — as set out in their data processing terms. If you would like details of the safeguards for a particular supplier, please ask us.

• Appointment requests submitted through this website are automatically and permanently deleted from the website database 90 days after they are submitted. This runs as a scheduled daily job — no one has to remember to do it. This deletion applies to the website database only; it does not determine how long information may be kept elsewhere, such as in the clinic mailbox or in clinical records.
• The notification email sent to our clinic mailbox is deleted when it is no longer needed for arranging your appointment.
• If you go on to become a patient, clinically relevant information becomes part of your patient record. Patient records are held separately from this website and retained in accordance with the professional and legal requirements that apply to the clinic. The clinic can provide further information about its clinical-record retention period on request.

Under UK data protection law you have the right to:

• Ask for a copy of the information we hold about you.
• Ask us to correct anything that is wrong or incomplete.
• Ask us to delete information, where we are not required to keep it.
• Ask us to restrict how we use it, or object to our use of it.
• Ask for a copy in a portable electronic format.
• Withdraw consent for optional website analytics at any time, using the cookie preferences link.

Email admin@thejointmech.co.uk and we will respond within one month. There is no charge. Some rights are limited where we must keep clinical records by law.

Please tell us first if something has gone wrong — we would like the chance to put it right. You also have the right to complain to the UK regulator, the Information Commissioner’s Office, at ico.org.uk/make-a-complaint or on 0303 123 1113.

If we change how we use your information we will update this page. This policy was last updated in September 2026.