Privacy Policy Effective Date: 04/07/2026 1. Introduction At Kinetic Recovery, we are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, booking an appointment, or receiving treatment, you acknowledge that you have read this Privacy Policy. ⸻ 2. Data Controller The data controller responsible for your personal information is: Business Name: Kinetic Recovery Email: kinesiologybychlo03@icloud.com Telephone: 07956325810 Business Address: 24 Wellsway, Keynsham, Bristol. BS31 1HT ⸻ 3. Information We Collect Depending on the services you receive, we may collect: Personal Information * Full name * Date of birth * Address * Telephone number * Email address * Emergency contact details Health Information To provide safe and appropriate treatment, we may collect: * Medical history * Current health concerns * Medications * Allergies * Injuries * Surgical history * Lifestyle information * Pregnancy status where relevant * Treatment notes * Progress records This information is considered special category personal data under UK GDPR. Website Information If you use our website, we may collect: * IP address * Browser type * Device information * Website usage data * Cookies (where applicable) ⸻ 4. Why We Collect Your Information We use your personal information to: * Book and manage appointments * Provide kinesiology and sports massage treatments * Maintain accurate treatment records * Recommend appropriate exercises, lifestyle advice, or nutritional support * Contact you regarding appointments * Process payments * Comply with legal and professional obligations * Improve our services Where you have given permission, we may also contact you about offers, updates, or newsletters. You may opt out at any time. ⸻ 5. Lawful Basis for Processing We process your information under one or more of the following lawful bases: * Your consent * Performance of a contract (providing treatment) * Compliance with legal obligations * Legitimate interests in running our business safely and effectively Health information is processed only where permitted under UK GDPR, including for the provision of health-related services. ⸻ 6. Confidentiality Your information is treated as strictly confidential. We will never sell your personal data. Information will only be shared: * With your consent * If required by law * Where necessary to protect you or another person from serious harm * If required by our professional insurers or regulatory authorities ⸻ 7. How We Store Your Information Your records may be stored securely: * In password-protected electronic systems * In secure cloud-based practice management software * In locked filing cabinets for any paper records We take appropriate technical and organisational measures to protect your information from loss, misuse, unauthorised access, or disclosure. ⸻ 8. How Long We Keep Your Information Client records are retained only for as long as necessary to meet legal, insurance, and professional requirements. After the retention period has expired, records will be securely destroyed or permanently deleted. ⸻ 9. Your Rights Under UK GDPR, you have the right to: * Request access to your personal information * Request correction of inaccurate information * Request deletion of your information where applicable * Restrict how your information is processed * Object to certain processing activities * Request transfer of your data where applicable * Withdraw consent where processing is based on consent Some of these rights may be limited where we have legal or professional obligations to retain records. To exercise your rights, please contact us using the details provided in this policy. ⸻ 10. Cookies If our website uses cookies, they help improve your browsing experience and website performance. You can manage or disable cookies through your browser settings. Where required by law, we will ask for your consent before placing non-essential cookies. ⸻ 11. Third-Party Services We may use trusted third-party providers for services such as: * Online appointment booking * Payment processing * Website hosting * Email communication These providers process your information only as necessary to provide their services and are expected to comply with applicable data protection laws. ⸻ 12. Data Security We take reasonable steps to protect your personal information by using secure systems, strong passwords, software updates, and appropriate access controls. While no system can guarantee absolute security, we continually work to safeguard your information. ⸻ 13. Children’s Privacy Clients under the age of 18 require the consent of a parent or legal guardian before treatment. Personal information relating to children is handled with the same level of confidentiality and protection as adult records. ⸻ 14. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business practices. The most recent version will always be available on our website or upon request. ⸻ 15. Contact Us If you have any questions about this Privacy Policy or how we handle your personal information, please contact: Kinetic Recovery Email: kinesiologybychlo03@icloud.com Telephone: 07956325810 If you are unhappy with how your personal information has been handled, you also have the right to make a complaint to the Information Commissioner’s Office (ICO).