Privacy
Policy.

Coventry Recovery Studio provides mobile sports and recovery massage services in Coventry. Coventry Recovery Studio is responsible for the personal information described in this privacy policy.

This policy applies when you use our website, make an enquiry, book an appointment or receive treatment from Coventry Recovery Studio.

We may collect information including your name, date of birth, telephone number, email address, treatment address, appointment details and any information you choose to provide when making an enquiry or booking.

When you complete a consultation or receive treatment, we may also collect information about your health, symptoms, injuries, areas of discomfort, relevant medical history and other information needed to assess treatment suitability and maintain an appropriate treatment record.

Information about your health is treated as special category personal data under UK data protection law. We only ask for health information that is relevant to assessing whether treatment is appropriate, providing treatment and maintaining professional client records.

Where we rely on your explicit consent to process health information, this consent is requested separately from your consent to receive treatment. You may withdraw your consent to future processing based on consent at any time.

Withdrawal of consent does not necessarily require the deletion of an existing professional client record where information must continue to be retained for applicable legal, professional, insurance or claims-related purposes.

We use personal information to respond to enquiries, arrange and manage appointments, communicate with clients, provide requested services, assess treatment suitability, maintain treatment records and manage the administration of Coventry Recovery Studio.

Depending on the information and the reason it is being used, our lawful basis may include taking steps at your request before providing a service, performing our agreement with you, complying with applicable obligations, our legitimate interests in operating and protecting the business, and your explicit consent where required for health information.

When you book an appointment, information such as your name, contact details, treatment address, selected service, appointment date and time and any booking comments may be collected and stored through our website and booking system.

Information submitted through our contact form is used to respond to your enquiry. We do not currently use enquiry or booking information for email or SMS marketing.

Online payments are processed through Stripe. Payment information is submitted through Stripe's payment service and Coventry Recovery Studio does not receive or store your full card details.

Stripe may process information such as your name, email address, payment details and transaction information in accordance with its own privacy and security practices.

We do not sell your personal information. We use trusted service providers where necessary to operate the website, manage appointments, process payments, store professional records, deliver email and provide other essential business services.

These services may include WordPress and Easy Appointments for website bookings, Google services for business email and secure record storage, Stripe for payments, Brevo and WP Mail SMTP for email delivery, WPForms for website forms, Hosting.com for website hosting, and Google services used for website analytics and advertising.

Information may also be disclosed where required by law or where reasonably necessary for the establishment, exercise or defence of legal claims.

Our website may use cookies and similar technologies to operate the website, understand how it is used and measure the effectiveness of our advertising.

We use Google Analytics and Google Ads. Depending on your cookie choices and the configuration of these services, information about your device and your use of the website may be processed by Google for measurement and advertising purposes.

Where consent is required for non-essential cookies or similar technologies, these should only be used after the relevant consent has been provided.

Some of the service providers we use operate internationally. This means personal information may in some circumstances be processed or stored outside the United Kingdom.

Where this occurs, we rely on the safeguards and transfer arrangements made available by the relevant provider and required under applicable UK data protection law.

Client consultation and treatment records, including the personal information forming part of those records, are retained for a minimum of five years in accordance with our professional and insurance requirements. Where the client is a child, records are retained for at least five years after they reach adulthood.

Personal information that does not form part of a client treatment record is retained only for as long as reasonably necessary for the purpose for which it was collected, or where longer retention is required for legal, accounting, contractual or other applicable purposes.

We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.

Access to client information and professional treatment records is restricted to those who require access for the purposes for which the information is held.

Under UK data protection law, you may have rights including the right to request access to personal information held about you, ask for inaccurate information to be corrected, request erasure or restriction in certain circumstances, object to certain processing, and request transfer of certain information where applicable.

Where processing is based on consent, you also have the right to withdraw that consent. However, the right to erasure is not absolute. We may need to retain consultation and treatment records where this is necessary to meet professional or insurance requirements, or for the establishment, exercise or defence of legal claims.

Where we cannot erase information you have asked us to delete, we will explain what information must be retained and why. Privacy requests can be made through our contact page, and we may need to verify your identity before responding.

If you have concerns about how your personal information has been handled, please contact Coventry Recovery Studio so that we can try to resolve the matter.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

For privacy-related questions, requests concerning your personal information or questions about this policy, please use our contact page.