Last Updated: 20/10/2026

At TB Physio, we protect the privacy and confidentiality of our patients' personal and medical data in accordance with the EU GDPR, Spanish LOPDGDD (LO 3/2018), and Spanish Patient Autonomy Law 41/2002.

• Business Name: TB Physio

• Patient & Health Data: Name, contact details, DNI/NIE/Passport, medical history, clinical notes, treatment records, and billing info.
• Website Data: Contact form submissions, online booking details, and technical usage data (cookies).

• Providing Physiotherapy Care: To evaluate, diagnose, and treat you (Contract execution / Provision of healthcare).
• Medical Records (Historia Clínica): To maintain statutory clinical notes (Legal obligation under Spanish Law 41/2002).
• Appointments & Reminders: To send confirmation or reminder messages via SMS, WhatsApp, or email (Legitimate interest / Service execution).
• Billing & Taxes: To process invoices and fulfill accounting duties (Legal tax obligations).

• Medical Records: Stored securely for a minimum of 5 years from the date of discharge (as required by Spanish Law 41/2002).
• Billing Records: Retained for 4 to 6 years for statutory tax compliance.
• Confidentiality: All patient health data is strictly confidential. We never sell your data and only share it with your consent (e.g., medical referrals, health insurance) or when required by law (e.g., tax authorities).

Under data protection laws, you have the right to access, rectify, or request deletion of your data (subject to mandatory health record retention limits), as well as rights to restrict, object, or port your data.