security castle secure 1202344

Sports Therapy One is committed to protecting your privacy and handling your personal information responsibly.

This privacy notice explains what personal information we collect, why we collect it, how it is used and stored, who it may be shared with, and your rights under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Sports Therapy One provides sports therapy, sports massage, exercise rehabilitation and running biomechanics services.

For the purposes of UK data protection law, Sports Therapy One is the data controller for the personal information we collect and use in providing our services.

Sports Therapy One
Website: www.sportstherapyone.com
Telephone: 01926 504 101

If you have any questions about how your personal information is handled, you can contact us using the details above or through the contact details provided on our website.

What Personal Information We Collect

The information we collect depends on how you interact with Sports Therapy One and which services you use.

This may include:

  • your name, address, telephone number and email address;
  • your date of birth and other information required for your appointment;
  • appointment details, including bookings, cancellations and attendance;
  • information you provide when contacting us by telephone, email, website form or other communication;
  • payment and transaction information;
  • health, medical and injury information relevant to your assessment, treatment or rehabilitation;
  • clinical assessment findings, treatment notes and rehabilitation records;
  • exercise and rehabilitation information;
  • photographs or videos where required for a service and where appropriate;
  • running and movement information collected as part of a biomechanics assessment;
  • technical information relating to your use of our website, such as device, browser and cookie information.

We only collect information that is reasonably necessary for providing our services, administering the business, meeting our legal and professional responsibilities, and operating our website.

Health and Special Category Information

As part of providing Sports Therapy, rehabilitation and biomechanics services, we may need to collect information about your health.

Health information is classed as special category personal data under UK GDPR and receives additional protection.

This may include information about:

  • current symptoms or injuries;
  • previous injuries and relevant medical history;
  • medication or treatment relevant to your care;
  • assessment findings;
  • treatment provided;
  • rehabilitation and exercise programmes;
  • pain, function and progress;
  • information relevant to your ability to participate safely in exercise or treatment.

We process this information only where it is necessary and where an appropriate lawful basis and special category condition under UK data protection law applies. Depending on the circumstances, this may include processing necessary for the provision of health-related care or treatment and, where appropriate, your explicit consent.

We limit the health information we collect to what is reasonably necessary for the service being provided.

Why We Use Your Personal Information

We may use your personal information to:

  • arrange, manage and confirm appointments;
  • provide Sports Therapy, sports massage, rehabilitation and biomechanics services;
  • assess your needs and maintain appropriate clinical records;
  • create and provide rehabilitation or exercise programmes;
  • communicate with you regarding your appointment, treatment or rehabilitation;
  • process and record payments;
  • respond to enquiries;
  • maintain appropriate business, financial and clinical records;
  • improve our services;
  • operate, maintain and understand the use of our website;
  • comply with legal, regulatory, insurance and professional obligations;
  • establish, exercise or defend legal claims where necessary;
  • send marketing communications where permitted by law.

Our Lawful Bases for Processing

Under UK GDPR, we must have a lawful basis for using your personal information.

Depending on the circumstances, we may rely upon:

Contract – where processing is necessary to arrange or provide a service you have requested or purchased.

Legal obligation – where we need to process or retain information to comply with a legal requirement.

Legitimate interests – where processing is reasonably necessary for the operation and administration of Sports Therapy One, provided those interests do not override your rights and interests.

Consent – where you have specifically agreed to a particular use of your information and consent is the appropriate lawful basis. You may withdraw consent where processing is based on consent.

Where special category health information is processed, we also identify an appropriate condition under Article 9 of UK GDPR and the Data Protection Act 2018.

Clinical Records

Where you receive treatment, assessment or rehabilitation services, we maintain appropriate records of your care.

These may include your presenting symptoms, relevant medical and injury history, assessment findings, treatment provided, rehabilitation recommendations and your progress.

Clinical records are maintained to support safe and appropriate care, continuity of treatment, professional accountability and the establishment or defence of legal claims where necessary.

Cliniko

Sports Therapy One uses Cliniko, a secure practice management system, to help manage appointments and client records.

Information held within Cliniko may include your contact information, appointment history, health information, clinical notes and communications relating to your care.

Cliniko processes this information on behalf of Sports Therapy One in accordance with its data protection and security arrangements.

Rehab My Patient

Sports Therapy One uses Rehab My Patient to create and provide exercise and rehabilitation programmes.

Where Rehab My Patient is used as part of your care, relevant information may be entered into or processed through the service so that an appropriate rehabilitation programme can be provided to you.

Depending on how you use the service, this may include information about exercises completed, your progress, pain levels and information or notes you provide regarding your rehabilitation.

Only information reasonably necessary for providing and monitoring your rehabilitation programme will be used.

Ochy Biomechanics Analysis

Sports Therapy One uses Ochy as part of its running biomechanics assessment service.

Where you undertake a biomechanics assessment, relevant information may be processed through Ochy in order to analyse your running movement and produce biomechanical measurements and analysis.

Depending on the assessment, this may include information such as:

  • video footage of your running;
  • height and weight;
  • running or movement speed;
  • information required for the analysis; and
  • biomechanical measurements generated from your movement.

Ochy provides movement-analysis technology and may process this information on behalf of Sports Therapy One when the service is used professionally for client assessment.

Sports Therapy One will only submit information that is reasonably necessary to provide the biomechanics assessment.

Payments

Sports Therapy One uses Tide for business banking and payment-related services.

Where you make a payment, relevant transaction information may be processed by Tide and/or the banking, card or payment service providers involved in completing the transaction.

Sports Therapy One does not intentionally store full payment-card details within its own website or clinical records.

Payment and transaction records may be retained where necessary for accounting, taxation, fraud prevention and business administration purposes.

Website Enquiries

If you contact Sports Therapy One through the website, by email or by telephone, we may collect the information you provide in order to respond to your enquiry.

Please avoid including unnecessary sensitive medical information in a general website enquiry. Appropriate health information can be collected through the relevant clinical systems when required.

Marketing Communications

Sports Therapy One may occasionally send information about its services where you have consented to receive marketing or where marketing is otherwise permitted under applicable UK law.

Receiving clinical or administrative communications relating to an appointment is not the same as receiving marketing.

Where you receive marketing communications, you can unsubscribe at any time using the unsubscribe option provided or by contacting Sports Therapy One.

We will not sell your personal information to third parties for marketing purposes.

Cookies and Website Analytics

The Sports Therapy One website may use cookies and similar technologies to enable the website to function, understand how it is being used and, where applicable, measure the effectiveness of advertising.

Some cookies are necessary for the website to operate and do not require consent. Other cookies or technologies may require your consent before they are used.

Where consent is required, you can choose whether to accept those technologies through the cookie controls provided on the website. You can also change your browser settings to restrict or delete cookies.

Where analytics or advertising services such as Google services are used, information about your interaction with the website may be processed by those providers in accordance with the applicable cookie choices and their own privacy arrangements.

We aim to use website tracking only in accordance with UK data protection law and the Privacy and Electronic Communications Regulations (PECR).

Who We May Share Information With

We do not sell your personal information.

We may share or allow access to personal information where reasonably necessary with organisations that provide services to Sports Therapy One, including:

  • practice management and clinical record providers such as Cliniko;
  • rehabilitation software providers such as Rehab My Patient;
  • biomechanics analysis providers such as Ochy;
  • banking and payment providers such as Tide and associated payment or banking partners;
  • website hosting and technology providers;
  • email and communication providers;
  • analytics and advertising providers where applicable;
  • accountants, insurers, legal advisers and other professional advisers where necessary;
  • regulators, law enforcement agencies, courts or other authorities where disclosure is legally required.

Where another organisation processes personal information on our behalf, we take reasonable steps to ensure appropriate data protection arrangements are in place.

We may also disclose relevant information where necessary to protect an individual’s vital interests or where required or permitted by law.

International Data Transfers

Some of the technology and service providers used by Sports Therapy One may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal mechanism and safeguards are in place as required by UK data protection law. These may include UK adequacy regulations, approved contractual safeguards or another lawful transfer mechanism.

How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, professional, insurance, accounting and regulatory requirements.

Different types of information may therefore be retained for different periods.

When determining an appropriate retention period, we consider the nature and sensitivity of the information, why it is required, applicable legal or professional requirements and whether it may be required in connection with a complaint or legal claim.

When information is no longer required, it will be securely deleted, destroyed or anonymised where appropriate.

How We Protect Your Information

Sports Therapy One takes reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

These measures include the use of secure systems, password-protected accounts, appropriate access controls, secure website connections and reputable specialist service providers.

No electronic system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature and sensitivity of the information we process.

If a personal data breach occurs, we will assess it in accordance with UK data protection law and notify the Information Commissioner’s Office and/or affected individuals where legally required.

Your Data Protection Rights

Depending on the circumstances, UK data protection law gives you rights over your personal information.

These may include the right to:

  • request access to the personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • request deletion of your information in certain circumstances;
  • request restriction of processing in certain circumstances;
  • object to certain types of processing;
  • request transfer of information in certain circumstances;
  • withdraw consent where processing relies upon your consent; and
  • object to direct marketing at any time.

These rights are not absolute and may not apply in every situation. For example, we may be required to retain certain clinical, financial or legal records even where deletion has been requested.

We may need to confirm your identity before responding to a request.

Making a Data Protection Request

If you would like to exercise one of your data protection rights or have a question about information held about you, please contact Sports Therapy One using the contact details provided in this notice.

We will respond in accordance with the timescales required by UK data protection law.

Complaints

If you have concerns about how Sports Therapy One has handled your personal information, please contact us first so that we have an opportunity to address your concerns.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Information about making a complaint and your data protection rights is available from the Information Commissioner’s Office website at www.ico.org.uk.

Third-Party Websites

Our website may contain links to websites operated by other organisations.

Sports Therapy One is not responsible for the privacy practices or content of third-party websites. You should review the privacy information provided by those organisations when using their websites or services.

Changes to This Privacy Notice

We may update this privacy notice periodically to reflect changes to our services, technology, providers or legal requirements.

The latest version will be published on the Sports Therapy One website with the date it was last updated.

Contacting Sports Therapy One

If you have any questions about this privacy notice, how your information is used or your data protection rights, please contact:

Sports Therapy One
Website: www.sportstherapyone.com
Telephone: 01926 504 101

Last updated: 27 August 2026