Last updated: 1 October 2026

MSK Injury Care ("we", "us", "our"), provided by Roshan Khanal as a sole trader, is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and the rights you have over it. We handle your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

The data controller is Roshan Khanal, trading as MSK Injury Care, based at Salus Wellness Clinics, Norman House, Cambridge Place, Cambridge CB2 1NS. If you have any questions about this policy or your data, contact us at roshan.khanal@mskinjurycare.co.uk or 01223 398 091.

2. Information we collect

Depending on how you interact with us, we may collect:

• Contact details - your name, phone number, and email address.
• Enquiry details - the reason for your enquiry and any message you choose to share.
• Appointment details - your date of birth, address, preferred date and time, and payment method.
• Health information- details about your condition, symptoms, injury, or medical history that you provide so we can assess and treat you. This is "special category" data and receives extra protection.
• Insurance details - where relevant, your provider, membership number, and authorisation number.

3. How we use your information

We use your information to:

• Respond to your enquiry and arrange a call back or appointment.
• Provide, plan, and deliver your physiotherapy care.
• Keep accurate clinical records as required by our professional obligations.
• Process payments and, where applicable, liaise with your insurer for your claim.
• Contact you about your appointments, including reminders and follow-ups.
• Meet our legal, regulatory, and professional record-keeping duties.

4. Lawful basis for processing

Under UK GDPR, our lawful bases are: your consent (for example, when you submit an enquiry asking us to contact you); the performance of a contract for your care; our legitimate interests in running the practice; and our legal obligations. For health information, we rely on the additional condition of processing for the provision of health care and treatment by a professional subject to a duty of confidentiality.

5. Who we share it with

We only share your information where it is necessary and lawful, and never for the purpose of selling it. We may share limited data with:

• Your medical insurer, where you are claiming through them and have authorised us to do so.
• Your GP or another healthcare professional, only with your consent or where there is a clinical need and a lawful basis.
• Trusted service providers who help us operate (such as secure booking, email, and hosting providers) under contracts that require them to protect your data and use it only on our instructions.
• Regulatory or legal authorities where we are required to by law.

Any provider that processes data on our behalf is bound by a written agreement and may not use your data for their own purposes.

6. How we protect your data

We take the security of your information seriously and use appropriate technical and organisational measures, including encrypted connections (HTTPS) for data submitted through this website, restricted access to records, and secure storage. While no method of transmission over the internet is completely secure, we work to protect your data and continually review our safeguards.

7. How long we keep it

We keep clinical records for the period required by professional and legal guidance (generally at least eight years from your last appointment for adults, and longer for records relating to children). Enquiry details that do not lead to treatment are kept only as long as needed to respond to you and are then deleted.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data, where there is no overriding legal reason to keep it.
• Restrict or object to certain processing.
• Withdraw consent at any time, where we rely on consent.
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us using the details above. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

This website uses only the cookies necessary for it to function and does not use your data for advertising. Any analytics we use are configured to respect your privacy.

10. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.

11. Contact us

If you have any questions about this privacy policy or how we handle your data, please contact Roshan Khanal at roshan.khanal@mskinjurycare.co.uk or call 01223 398 091.