Privacy Policy

 Privacy Policy for Zenith Performance and Recovery
Last updated: 28/10/2024

Zenith Performance and Recovery ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, share, and safeguard your personal data in accordance with the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

1. Who we Are
We provide sports massage therapy, personal training, and sports coaching services. We are the "data controller" of your personal data, meaning we decide how and why your data is processed.

2. Information we collect

• Contact Information: Name, email address, phone number, and postal address.
• Health Information: Medical history, injuries, or relevant health conditions to provide appropriate massage therapy or fitness coaching.
• Payment Information: Payment details are processed securely by Stripe and are not stored directly by us.
• Technical Information: IP address, browser type, and cookie information when you visit our website.

3. How we use your data

• To provide services: booking appointments, offering personalized massage and coaching, and managing your health records.
• Communication: appointment confirmations, reminders, and updates.
• Payment Processing: via Stripe.
• Legal and Compliance: meeting legal obligations such as health and safety regulations.

4. Remote Services Data Security
For in-home or remote appointments, any additional data collected (e.g., location) will be processed and stored securely, solely to facilitate and manage these services. This data is handled in compliance with GDPR and is subject to the same security measures applied to all other personal information.

5. How we store and protect your data

• We store your personal information securely using encryption and other security measures. Payment data is securely handled by Stripe.
• Cliniko and Rehab My Patient: We share your data with these third-party processors, who comply with GDPR and handle your data securely.
• We retain data only for as long as necessary for services and legal requirements.

6. Sharing your data
We do not sell or share your data for marketing purposes. We may share your data with:

• Service Providers: Third-party companies (e.g., Cliniko for booking management, Rehab My Patient for exercises, Stripe for payments) comply with GDPR.
• Legal bodies: when required by law.

7. Your rights
Under GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct inaccurate or incomplete information.
• Erasure: Request deletion of your personal data.
• Restriction: Limit the processing of your data.
• Data Portability: Transfer your data to another service provider.
• Objection: Object to how we process your data.
• Contact us to exercise these rights.

8. Cookies and Tracking
Our website uses cookies to enhance user experience and analyse traffic. Cliniko and Rehab My Patient may also use cookies in compliance with GDPR. Refer to our Cookie Policy for more details.

9. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites.

10. Data Security
We use encryption and secure servers. While we take precautions, no method is 100% secure.

11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on our website, and significant updates will be communicated via email.

12. Contact us
For any questions or to exercise your rights, please contact us at:
Zenith Performance and Recovery
Email: david@reachyourpeakperformance.co.uk
Phone: 07777 501558