The details

MOYO 2026

Privacy Notice

The practical detail behind every session. How bookings work, what happens if plans change, and where you stand throughout your time with us. Read alongside our Privacy Notice for the full picture.

Plain View
Full View

01 —

Who We Are

We're MOYO, the trading name of Benn McLean Group Ltd. We decide how your data is used and we're responsible for it. We treat UK patients from the UK and Germany, so both UK and EU data protection law apply. Questions go to hello@moyophysio.com.

02 —

What information we collect

Your basic details, your health information, and the admin that comes with treatment: appointments, payments, messages. Most of it comes directly from you. With your consent, some may come from other health professionals.

03 —

Processing

We use your data because we need it to deliver the physiotherapy you've booked, to run the service properly, and to meet our legal duties. Health data gets extra protection in law, and it's handled by health professionals bound by confidentiality.

04 —

How we use your information

To assess and treat you, keep accurate records, manage bookings and payments, keep you safe, and improve the service. We never sell your data. No automated decisions are made about your treatment.

05 —

Who We Share Your Information With

Only where needed: your GP, emergency services if you're at immediate risk, regulators or insurers where the law or a claim requires it, and the secure systems we run the practice on. Every provider works under a data processing agreement.

06 —

International Transfers

Your clinical records are stored in the UK. Treatment is also delivered from Germany, so EU standards apply on top of UK ones. If any system moves data outside the UK, legal safeguards are in place first.

07 —

How Long We Keep Your Information

Clinical records: 8 years from the last entry. Financial records: 6 years. After that, securely deleted.

08 —

Recording of Consultations

Sessions aren't routinely recorded. Recording only happens for a specific clinical, training, quality or safety reason, and only with your explicit consent. Say no or change your mind at any time, your treatment isn't affected. Recordings are never used for marketing. Want to record for your own use? Tell your physiotherapist first, and don't share it.

09 —

Your Rights

You can see your data, have it corrected, restrict or object to how it's used, and ask for it to be transferred. Clinical records can't be erased while we're legally required to keep them. Something wrong? Contact us first. You can also complain to the ICO or, for our processing in Germany, the BayLDA.

10 —

Data Security

Encryption, password protection, two factor authentication, controlled access, and secure UK or EU servers wherever possible.

11 —

Data Breaches

If a breach puts you at risk, we notify the ICO within 72 hours where required and tell you without delay.

12 —

Updates to this notice

This notice may change. The latest version is always on this page.

Last updated:

Aug 2026

Any questions? Reach us at support@moyophysio.com.