Privacy Policy

Privacy Policy for LH Sport Therapy

Protecting Your Personal Data

Welcome to LH Sport Therapy. We are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you interact with our clinic either in person or online, in accordance with the General Data Protection Regulation (GDPR).

1. Introduction

At LH Sport Therapy, we provide sports therapy services to our clients. As part of our operations, we collect personal data through online bookings, digital forms, and in-person consultations. We are dedicated to maintaining strict confidentiality and ensuring your information is handled securely and in line with all applicable regulations.

2. Who We Are

LH Sport Therapy we are a sports therapy clinic operating both physically and digitally. For the purposes of data protection law, we are the “data controller” of your personal information.

3. What Information We Collect

We may collect, store, and process the following types of personal data:

Personal Identification: Name, date of birth, address, telephone number, email address, and emergency contact details.
Health and Medical Information: Medical history, current health conditions, GP details, medications, allergies, and treatment notes.
Appointment and Booking Information: Details of appointments, booking history, and communications regarding bookings.
Payment Details: Payment card information (processed securely by third-party payment providers), billing address, and payment history.
Technical Data: IP address, browser type, device information, and cookies (collected when using our online systems).
Other Data: Any other information you provide to us during the course of your treatment or interaction.

4. How We Collect Your Data

We collect data through the following means:

Direct Interaction: When you register, book an appointment, complete forms, or communicate with us in person, via email, phone, or through our website.
Automated Collection: When you use our website or online booking system, certain technical data (such as cookies and usage data) is collected automatically.
Third Parties: Where necessary, we may receive information about you from health professionals or providers involved in your care, strictly with your consent.

5. Legal Basis for Processing Your Data

We process your personal data under the following legal bases:

Consent: Where you have given clear consent for us to process your information for a specific purpose (e.g., marketing communications).
Contractual Necessity: Processing necessary to fulfil our contract with you (e.g., to provide therapy services).
Legal Obligation: Where processing is necessary for compliance with legal requirements (e.g., health and safety, record keeping).
Vital Interests: Where it is necessary to protect your vital interests or those of another person.
Legitimate Interests: Where processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

6. How We Use Your Information

Your data may be used for the following purposes:

To provide, manage, and deliver safe and effective sports therapy services to you.
To manage appointments, bookings, and communications.
To maintain accurate medical and therapy records in line with legal and professional requirements.
To process payments and manage billing.
To improve our services, website, and client experience.
To handle enquiries, complaints, or feedback.
To communicate important updates, changes to our services, or health and safety information.
To comply with legal or regulatory obligations.

7. Record Keeping and Data Retention

We keep records in accordance with GDPR and professional guidelines for sports therapists:

Medical and Therapy Records: Retained for a minimum of 8 years from the date of last treatment, or until a child reaches age 25, whichever is longer.
Booking and Communication Records: Retained for up to 2 years after the final communication unless required for longer due to legal or regulatory obligations.
Payment Information: Retained only as long as necessary for accounting and audit purposes.

After these periods, your data will be securely destroyed, anonymised, or deleted.

8. Sharing Your Information

We will only share your data in the following circumstances:

With Your Consent: When you authorise us to share information with other health professionals, insurers, or family members.
Service Providers: With trusted third-party service providers (such as online booking platforms or payment processors) who handle data on our behalf and are contractually bound to protect it.
Legal Requirements: Where required by law, regulation, or court order.
Emergency Situations: To protect your vital interests or those of others.

We never sell or share your data for marketing purposes without explicit consent.

9. International Data Transfers

If your data is transferred outside the United Kingdom or European Economic Area (EEA), we ensure adequate protection is in place, including standard contractual clauses or other legal safeguards.

10. Security of Your Data

We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:

Secure online booking and payment systems with encryption.
Physical security for paper records and restricted access to data storage.
Regular staff training on data protection and confidentiality.

11. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access: You can obtain a copy of the personal information we hold about you.
Right to Rectification: You can request that incorrect or incomplete data be corrected.
Right to Erasure (“Right to be Forgotten”): You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing: You can request a restriction on the processing of your data.
Right to Object: You can object to data processing in certain cases (e.g., for marketing).
Right to Data Portability: You can request your data in a machine-readable format for transfer.
Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
Right to Complain: If you believe your rights have been violated, you can complain to the Information Commissioner’s Office (ICO) or your local supervisory authority.

12. Cookies and Online Technologies

Our website uses cookies and similar technologies to enhance user experience, analyse traffic, and support online bookings. You can manage cookie preferences in your browser settings.

13. Children’s Privacy

We do not knowingly collect personal data from children under 13 without parental consent. Where we provide services to children, we ensure all data is managed in accordance with GDPR and with the explicit consent of parents or guardians.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, and significant changes will be communicated to you via email or at your next appointment.

15. Contact Us

If you have any questions about this Privacy Policy or wish to make a data request, please contact us at:

LH Sport Therapy

lhsporttherapy@hotmail.com

We are committed to responding to all requests promptly and transparently.

Thank you for trusting LH Sport Therapy with your care and privacy.