Privacy policy | Podoactiva

Last updated: 1 October 2026.

1. Who the controller is

The controller of the personal data collected through podoactiva.co.uk (the «Site») is Podoactiva S.L., a company incorporated in Spain with tax number ESB22316707 and registered office at Parque Tecnológico Walqa, Cuarte, Huesca, Spain.

There is no separate UK company: the Podoactiva units listed on this Site are independent podiatry and physiotherapy practices that host a Podoactiva unit. When you contact one of them, see section 4.

For anything to do with this policy or with the way your data is handled, write to dpo@podoactiva.com.

2. What we collect

Only what you give us when you complete a form on the Site:

• Contact details: name, email address, telephone number and, where relevant, town and country.
• The content of your enquiry: the unit you are asking about and whatever you choose to write.
• Browsing data: in aggregate and without identifying you — pages visited, device type and country. The Site sets no cookies of its own (see section 7).

Health data. The Site is not intended to collect health data and we ask you not to include any in the free-text field: that information is taken, where needed, at the unit and in person. If you provide it anyway, by ticking the box on the form you give your explicit consent for it to be used solely to deal with your enquiry.

3. What we use it for, and on what basis

• To answer your enquiry and arrange an appointment. Lawful basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) UK GDPR). Where health data is involved, your explicit consent (Article 9(2)(a)).
• To pass your enquiry to the unit you have chosen, so that it can deal with it. Same basis.
• To keep an internal record of enquiries received through the Site and check that they are answered, as a service quality control. Lawful basis: our legitimate interest in running the Site properly (Article 6(1)(f)).
• To comply with our legal obligations. Lawful basis: Article 6(1)(c).

We do not use your data to send marketing, and we do not profile you.

4. Who receives your data

Your enquiry is sent to the Podoactiva unit you select, so that the practice hosting it can deal with you. Those practices are independent businesses and are responsible in their own right for the data they hold about you from the moment they attend to you, including any clinical records. Each makes its own privacy information available at its premises.

Beyond that, your data is handled by the providers that operate the Site and its email delivery, acting on our instructions under a written contract, and by no one else. We do not sell your data and we do not share it for advertising.

5. Where your data is handled

Podoactiva S.L. is established in Spain, so your data is transferred outside the United Kingdom. Spain is covered by the UK adequacy regulations for the European Economic Area, which means the transfer is permitted without further safeguards. Our email delivery provider processes data within the European Economic Area.

6. How long we keep it

Enquiries received through the Site are kept for as long as is needed to deal with them and, afterwards, for the period required to meet any legal obligation or to defend a claim. Once that period ends, they are deleted.

7. Cookies

This Site sets no cookies of its own. There is no advertising, no tracking pixels and no analytics that identify you: visitor statistics are produced by our hosting provider in aggregate and without cookies, which is why you will not find a consent banner here.

The only third-party content is the Google map embedded on each unit's page, which may set its own cookies when it loads. That is governed by Google's own privacy policy.

8. Your rights

You have the right to access your personal data, to have it rectified or erased, to restrict or object to its processing, and to data portability. Where processing is based on your consent, you may withdraw it at any time, without affecting what was done before.

To exercise any of these, write to dpo@podoactiva.com, telling us which right you wish to exercise. We will reply within one month.

If you are not satisfied with our response, you may complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

9. Security

The Site is served over an encrypted connection, form submissions travel encrypted, and access to the mailboxes that receive them is restricted to the people who deal with them.

10. Changes to this policy

If this policy changes, the new version will be published on this page with its date. We recommend you check it from time to time.