Your information

Privacy policy

Last updated: 10 October 2026

This policy explains how I collect, use and protect personal information when you visit this website, contact me, or when I provide rehabilitation support to a client. I take confidentiality seriously, and I handle personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who I am

Optimatter is the trading name of Rob McLellan, a self-employed rehabilitation therapy assistant based in Bolton, Greater Manchester. For the purposes of data protection law, I am the data controller for the personal information described in this policy.

• Email: rob.optimatter@outlook.com
• ICO registration number: ZB670832

When you visit this website

This website has no contact forms, no user accounts, no advertising and no analytics or tracking cookies.

• Hosting. Like all websites, the company that hosts this site may automatically log technical information such as your IP address, browser type and the pages requested, for security and to keep the site running.
• Fonts. This site uses Google Fonts. When a page loads, your browser connects to Google's servers, which receive your IP address. Google's privacy policy applies to that information.
• External links. Links to LinkedIn and other sites are governed by those sites' own privacy policies.

When you contact me

If you email me, I will receive your name, email address and anything you include in your message. I use this to reply to you and to discuss any potential referral. Please do not include detailed health information about a client in a first enquiry; I will arrange a secure way to share this if a referral goes ahead.

When I support a client

To provide rehabilitation support safely, I may hold information about clients and the people involved in their care, including:

• Contact details for clients, family members, case managers, deputies and treating professionals.
• Referral information, rehabilitation goals and the plans set by the treating team.
• Session records, progress notes and observations.
• Risk and safeguarding information.
• Health information relevant to the support I provide.

Health information is "special category" data, so it receives extra protection. I only collect what I need to provide the support I have been commissioned to deliver.

My lawful bases for using information

• Contract: to agree and deliver the services I am commissioned to provide.
• Legitimate interests: to respond to enquiries, keep business records and coordinate with the professionals involved in a client's care.
• Legal obligation: for example, tax and accounting records, and safeguarding duties.
• Health information: processed for the provision of health or social care (UK GDPR Article 9(2)(h)), under a duty of confidentiality, in line with the Data Protection Act 2018.

Who I share information with

I only share information where it is necessary and appropriate, which may include:

• The client's treating clinicians, case manager and wider multidisciplinary team.
• Deputies, solicitors or commissioning organisations, where they have instructed or funded my involvement.
• My insurers, accountant or professional advisers, where needed to run my business.
• Safeguarding authorities, the police or other bodies where the law requires it or where someone is at risk of harm.

I never sell personal information or use it for marketing.

Keeping information secure

I store records on password-protected, encrypted devices and secure accounts, share sensitive information only by secure means, and limit access to those who need it. Some of the services I use, such as email, may store data outside the UK; where this happens, appropriate safeguards are in place as required by UK data protection law.

How long I keep information

I keep client information only for as long as I am providing services. When my involvement with a client concludes, I pass on any records required by the commissioning organisation or case manager, and then securely delete or destroy the information I hold. Enquiries that do not lead to a referral are deleted once the enquiry has concluded.

The only exception is where the law requires me to keep certain records for longer, for example invoices and business accounts for tax purposes.

Your rights

You have the right to:

• Ask for a copy of the personal information I hold about you.
• Ask me to correct information that is inaccurate or incomplete.
• Ask me to delete your information, or restrict how I use it, in certain circumstances.
• Object to how I use your information in certain circumstances.
• Ask for your information to be transferred to another organisation, where this applies.

To make a request, email me. I will respond within one month. Some rights are limited where I must keep records by law or to protect someone's safety.

Complaints

If you have a concern about how I handle your information, please contact me first and I will do my best to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

I may update this policy from time to time. The latest version will always be on this page.