Privacy Policy
Short version: we collect what you send us so we can arrange your treatment, and anonymous page statistics if you allow cookies. We do not sell anything to anyone.
Health information you give us is treated as sensitive personal data under the Data Protection Act 2019 and is only ever seen by the clinician treating you.
Who is responsible for your data
Nairobi Physio, at The Mandrake, Off Ring Road, Westlands. You can reach us about anything on this page at hello@nairobiphysio.com.
What we collect, and why
A booking usually includes your name, contact details and a short description of the problem. Clinical notes made during treatment are held separately and seen only by your clinician.
Two things, and no more than that.
- What you send us. If you call, send a WhatsApp message or email us, we hold what you tell us: usually a name, a number, an address and a description of the work. We use it to quote and to do the job, and for nothing else.
- Anonymous usage statistics. If you accept cookies, Google Analytics records which pages are read and roughly where visitors come from. It tells us which pages are useful. It does not tell us who you are.
We do not sell your data, we do not share it with advertisers, and we do not use it for advertising or profiling. Advertising signals are switched off in our analytics settings.
The self-assessment
The self-assessment asks where your pain is, how it started, how long it has lasted and how severe it is. Those answers are health information about you, which the Data Protection Act 2019 treats as sensitive personal data, so it is worth being precise about what happens to them.
- You are asked first. Nothing is collected until you tick the box on the opening screen. If you do not, the assessment does not start.
- Why we hold it. So a physiotherapist can read your answers before contacting you, and so the first appointment starts from what you have already told us rather than from a blank page. That is the only purpose.
- Our lawful basis is your consent, which you give by ticking that box. You can withdraw it at any time by writing to us, and we will delete what we hold.
- Safety answers. If your answers suggest you need urgent medical attention, the assessment tells you so and sends us a flagged note, so that a disclosure of something serious is not simply lost. That happens whether or not you go on to request an appointment.
- While you are answering your progress is kept in your own browser only, so a refresh does not lose it. It is cleared when you finish, and it never leaves your device until you submit.
- It is not a diagnosis and no clinical record is created from it. It is an enquiry with more detail than usual.
You are never required to use it. Calling, sending a WhatsApp message or using the ordinary booking form reaches us just as well, and asks you for less.
Cookies, and your choice
No analytics cookie is set unless you accept. Until you choose, analytics is off. If you accept and later change your mind, clear this site's cookies in your browser and the banner will ask again.
How long we keep it
Enquiries and job records are kept while we are working for you and afterwards for as long as tax and warranty obligations require. Analytics data is retained by Google for 14 months and then deleted automatically.
Who else sees it
Google, as our analytics provider, which processes usage data on servers outside Kenya. Otherwise nobody, unless we are required to disclose something by law.
Your rights under the Data Protection Act 2019
Kenyan law gives you the right to ask what we hold about you, to have it corrected, to have it deleted, to object to how we use it, and to receive a copy. Email us and we will act on it. There is no charge.
If you are not satisfied with how we handle it, you can complain to the Office of the Data Protection Commissioner of Kenya at odpc.go.ke.
Changes
If this policy changes we will update this page and the date below.
Last updated: August 2026.