Privacy Policy

Who we are

Canary Wharf Podiatry ("we", "our", "us"), part of The Podiatry Group, is an HCPC-registered podiatry practice operating from two London clinics — Canary Wharf (1 Westferry Circus, E14 4HD, inside LycaHealth) and City Dock (142 Vaughan Way, Wapping, E1W 2AF). Our data controller contact is contact@thepodiatrygroup.co.uk.

What personal data we collect

• Contact details you provide when booking (name, email, phone)
• Medical history and relevant health information required for safe assessment and treatment, including medication, circulation and diabetes status where relevant to foot care
• Clinical assessment notes, treatment records, and — where you consent to a procedure such as nail surgery — operative and aftercare records
• Clinical photographs only where you give specific written consent
• Payment information processed securely via our booking provider
• Website analytics — only after you accept the consent banner — via PostHog (EU region). We capture page views and clicks on call/booking buttons. We never capture form-input text, names, addresses, or any clinical detail.

How we use your data

Your personal and clinical data is used solely to provide safe podiatry care, for legally required clinical record-keeping, and to keep you informed about your own treatment. We do not sell data, we do not share data with third parties for marketing, and we do not use any clinical material — including clinical photographs — for marketing without your explicit written consent.

Data processors we use

• Cliniko — appointment scheduling, clinical notes, and payments. The provider holds your booking history and the clinical record we generate at each visit, under UK/EU GDPR data-processing terms.
• PostHog (EU region) — anonymised website analytics for visitors who accept the consent banner. No clinical or personal data flows to PostHog.

Your rights

Under UK GDPR you have the right to access your data, correct inaccuracies, request deletion (subject to the clinical retention period below), restrict processing, and lodge a complaint with the Information Commissioner's Office. To exercise any right, contact contact@thepodiatrygroup.co.uk.

How long we keep your data

Clinical records are retained for 8 years from the date of your last appointment, in line with HCPC Standards of Conduct, Performance and Ethics. Marketing consent can be withdrawn at any time; withdrawal takes effect within 7 working days. Website analytics data is processed by PostHog in the EU region (Frankfurt) under its EU Data Processing Addendum and retained for 7 years from collection or until you withdraw consent — whichever comes first.

Changes to this policy

This policy was last updated on 31 May 2026. Material changes will be notified to existing patients by email.