Privacy policy
Last updated: November 2026 · Translation for information only; the Spanish version prevails
In the online consultation you send us health data, photos and videos. These are specially protected data and we treat them as such, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD). Here we explain plainly what we do with them.
1. Data controller
- Controller: Pedro Lucas Rubio (FisioReadapt Policlínica)
- Tax ID (NIF): 07990632H
- Address: C/ Cardenal Mella, 26, Bajo, 49009 Zamora (Spain)
- Email for privacy matters: consultas@fisiopodologia.es
2. What data we process
- Identification and contact: name, age, city, country, email and, if provided, phone.
- Health data: what you tell us about the problem, pain, previous injuries, tests, treatments, illnesses, medication, height, weight and physical activity.
- Images: the videos and photos of your feet, your gait and your shoes, and any reports you upload.
- If the patient is a minor: their data and the name and ID of the parent or guardian giving consent.
- Payment: amount, date, payment method and reference. Your card or PayPal account details are handled directly by Stripe; we never see them.
3. Why we use them and on what legal basis
| Purpose | Legal basis |
|---|---|
| Carrying out your online consultation: studying your case and sending you the report and exercise plan | Your explicit consent for health data and images (art. 9.2.a GDPR) and the consultation contract (art. 6.1.b GDPR) |
| Charging for the consultation and issuing the invoice | The contract (art. 6.1.b) and tax obligations (art. 6.1.c GDPR) |
| Contacting you if you filled in the form but didn't complete payment | Pre-contractual steps at your request (art. 6.1.b GDPR) |
| Keeping clinical records for the period required by law | Legal obligation: Spanish Law 41/2002 on patient autonomy (art. 6.1.c and 9.2.h GDPR) |
We don't use your data for advertising, we don't profile you and we don't make automated decisions about you. We never publish your photos or videos, not even anonymously, without first asking for your separate written permission.
4. Minors
If the consultation is for a minor, the form is filled in and consented to by their parent or legal guardian, who gives us their name and ID. Spanish law allows over-14s to consent for themselves (art. 7 LOPDGDD), but for the online consultation we always ask for guardian consent up to age 18.
5. How long we keep them
- Videos, photos and reports you upload: we delete them when your consultation is finished and at most 90 days after you send them.
- The report we send you and clinical data: at least 5 years from the consultation, as required by Spanish Law 41/2002.
- Billing data: for the period required by tax and commercial law (up to 6 years).
- Unpaid forms: are deleted after 30 days if we don't go ahead.
6. Who else sees them
Only the FisioReadapt professionals handling your consultation see them. We share them with no one, except where required by law. To run the website we use these providers, who process data only on our behalf under a data processing agreement:
| Provider | Purpose | Where |
|---|---|---|
| Cloudflare | Hosting the website and storing your answers and files, encrypted | Storage in the European Union |
| Stripe | Card, Apple Pay, Google Pay or PayPal payments | EU (Stripe Payments Europe, Ireland) |
| Brevo | Sending automatic emails | European Union (France) |
| Zoho | Our email, where we receive your consultation and reply to you | European Union |
Some of these providers are US groups. Where data may leave the European Economic Area, the transfer is covered by the EU-US Data Privacy Framework or the European Commission standard contractual clauses.
7. How we protect them
- The whole website is encrypted (HTTPS) and your files are stored encrypted.
- Your videos and photos have no public links: they can only be opened from a private panel that requires a code sent to our email.
- We delete files once they are no longer needed.
8. Your rights
You can ask us at any time for access, rectification, erasure, restriction, portability and objection, and withdraw your consent, by writing to consultas@fisiopodologia.es. Withdrawing consent doesn't affect what we did before, and we cannot delete what the law requires us to keep (section 5).
If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency: www.aepd.es.
9. Changes
If we change this policy, we will post the new version here with its date.