Privacy Policy for Kendall Sports Therapy

Last Updated: July 2026

Kendall Sports Therapy (“We”, “Us”, “Our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use our Service, book a session, or receive therapy, and tells You about Your privacy rights and how the law protects You under the UK General Data Protection Regulation (UK GDPR).

1. Who We Are

Detail	Information
Website:	https://www.kendallsportstherapy.co.uk/
Business Name:	Kendall Sports Therapy
Data Protection Contact:	Emily Kendall
Email Address:	Emily@kendallsportstherapy.co.uk

For the purposes of the UK GDPR, Kendall Sports Therapy is the data controller responsible for Your personal data.

2. The Data We Collect About You

While using Our Service or receiving sports therapy treatments, We may collect, store, and process various types of information:

• Identity & Contact Data: First name, last name, email address, phone number, and physical address (including town, county, and postal code).
• Health & Clinical Data (Special Category Data): Injury details, physical assessment notes, relevant medical history, current symptoms, treatment plans, and lifestyle details. This information is mandatory to deliver safe and effective sports therapy interventions.
• Technical & Usage Data: Internet Protocol (IP) address, browser type and version, pages visited, time and date of visits, time spent on pages, unique device identifiers, operating system, and other diagnostic data collected automatically when accessing the Website or mobile version.
• Third-Party Social Media Data: If You choose to register or log in through a Third-Party Social Media Service (such as Google, Facebook, or Twitter), We may collect Personal Data already associated with that account (e.g., name, email address, profile activity).
• Marketing & Preferences Data: Your preferences regarding receiving news, special offers, and communications from Us.

3. Lawful Basis for Processing

We process Your data under the following legal grounds:

1. Contractual Necessity: To manage Your bookings, process transactions, and fulfill the therapy contract or service requested by You.
2. Health & Social Care (Special Category Data): Under Article 9(2)(h) of the UK GDPR, We process health-related information for the provision of health or social care treatment under a professional duty of confidentiality.
3. Legal Obligation: To satisfy legal, accounting, tax, and professional record-keeping mandates.
4. Legitimate Interests: To improve and maintain Our Website, monitor usage trends, run promotional campaigns effectively, and protect Our practice.
5. Consent: Where You explicitly consent to receiving marketing communications or connect Your account via a Third-Party Social Media platform.

4. How We Use Your Personal Data

We may use Your Personal Data for the following specific purposes:

• To provide and maintain our Service: Including assessing Your clinical needs, delivering treatments, and monitoring website usage.
• To manage Your Account: To manage Your registration as a user of the Service and give You access to client functionalities.
• To contact You: By email, telephone, SMS, or equivalent electronic communications regarding appointment confirmations, reminders, security updates, or informative communications.
• To provide news and offers: To send You special offers and general information about other goods, services, and events We offer similar to those You have already purchased or enquired about (unless You have opted out).
• To process requests: To attend and manage any enquiries or requests You submit to Us.
• For business operations: For data analysis, identifying usage trends, and evaluating/improving Our Service, marketing, and client experience.

5. Sharing & Disclosure of Your Personal Data

We respect Your privacy and do not sell Your personal information. We may share Your data only in the following specific situations:

• With Service Providers: Third-party companies or individuals employed to facilitate Our Service, perform Website-related services, process secure payments, or assist in analyzing how Our Service is used.
• For Professional/Health Referrals: With Your explicit consent, We may share clinical summary notes with Your GP or other health professionals.
• Business Transfers: In connection with, or during negotiations of, any merger, sale of business assets, financing, or acquisition of all or a portion of Our business.
• Law Enforcement & Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), or to protect and defend Our legal rights and safety.

6. Tracking Technologies and Cookies

We use Cookies and similar tracking technologies (beacons, tags, and scripts) to track activity on Our Website and store certain information.

• Necessary / Essential Cookies (Session): Essential to provide You with services available through the Website and enable secure user authentication.
• Cookies Policy / Notice Acceptance Cookies (Persistent): Identify if users have accepted the use of cookies on the Website.
• Functionality Cookies (Persistent): Allow Us to remember choices You make (such as login details or language preferences) to provide a personalized experience.

You can instruct Your browser to refuse all Cookies; however, some parts of Our Service may not function properly as a result.

7. Data Retention & Security

• Clinical Retention: In accordance with UK healthcare and insurance guidelines, adult clinical records are retained for a minimum of 7 to 8 years following Your last treatment.
• General Data & Usage Data: Retained for as long as necessary to fulfill the operational, tax, and legal purposes outlined in this policy. Usage Data is generally retained for shorter periods unless used for security or system functionality improvements.
• Security: We employ commercially reasonable technical and organizational measures to safeguard Your Personal Data. However, no method of transmission over the Internet or electronic storage is 100% secure.

8. Children’s Privacy

Our Service does not directly address anyone under the age of 13 without parental consent. We do not knowingly collect personally identifiable information online from children under 13. If We become aware that We have collected Personal Data from anyone under 13 without verified parental consent, We take immediate steps to remove that information.

9. Third-Party Links

Our Service may contain links to other websites not operated by Us. If You click on a third-party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit.

10. Your Legal Rights (UK GDPR)

Under UK data protection laws, You have the right to:

• Access: Request a copy of the Personal Data and clinical notes We hold about You.
• Correction: Request that We update or rectify any inaccurate or incomplete information.
• Erasure: Request deletion of Your data (where it does not conflict with Our legal or professional obligations to retain medical/financial records).
• Withdraw Consent: Opt out of marketing communications or revoke consent for optional data processing at any time.

To exercise these rights, please contact Emily Kendall at Emily@kendallsportstherapy.co.uk.

11. How to raise a data protection concern or complaint

If you have any questions, concerns, or wish to make a formal complaint about how we handle your personal data, you have the right to raise this directly with us.

How to contact us:

Please use our online complaints form here or email us at Emily@kendallsportstherapy.co.uk.

Our process: We will formally acknowledge your complaint within 30 days of receipt and work to investigate and resolve your concern without undue delay.

Escalating to the Information Commissioner’s Office (ICO)

If you remain dissatisfied with our final response, or if we fail to respond to you within the statutory timeframe, you retain the right to lodge a complaint with the UK data protection regulator:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113

Website: www.ico.org.uk