Privacy Policy

Introduction

Speeding Health is committed to protecting the privacy of our clients and website visitors. This policy explains what personal infromation we collect, how we use it, and how we keep it safe.

For the purpose of data protection law, the data controller is Speeding Health. You can reach us at [email protected] about anything to do with your data.

Information We Collect

We may collect the following types of personal information:

1. Contact information: name, address, email address, and phone number.

2. Health and medical information: details of injuries, health conditions, medications and treatment preferences.

3. Photographs or videos: with your agreement, we may take posture or movement photos (for example, through our exercise app) to assess you and track your progress over time. These are kept as part of your clinical record, and we won't use them for anything else, like marketing, without asking you first.

4. Card payment and payment history.

5. Booking and enquiry information: the details you give us when you book, request a call back, or download a free guide.

6. Website information: website and device information, such as your IP address and basic data about how you use our site, collected through cookies (see our Cookie Policy).

Health and medical details are treated as "special category" data under UK GDPR, which means they get an extra level of protection. We collect and use this information with your explicit consent and for the purpose of providing you with safe, effective care.

Why We're Allowed to Use It (Our Lawful Basis)

We only use your information where the law allows. In plain terms, that means:

1. To provide your care- so we can deliver the treatment or classes you've booked.

2. With you consent- for things like marketing emails, which you can withdraw at any time.

3. To meet a legal duty- for example, keeping clinical records for the required period.

4. For our legitimate interests- running and improving our business, as long as this doesn't override your rights.

For your health and medical information specifically, we rely on your explicit consent and on the basis that it's needed for the provision of healthcare.

How We Use Your Information

Your information is used to:

1. Schedule appointments and provide personalised therapy services.

2. Record medical and appointment information for the safety of both practitioner and patient, as legally required (generally 8 years after your last treatment).

3. Process payments for our services.

4. Prescribe and share home exercises through our exercise app.

5. Send updates and promotional material, but only if you've opted in.

Sharing Your Information

We do not sell or rent personal information to third parties. We may share your information with:

1. Trusted software providers who help us run the practice-such as our class booking system, our clinical booking and records system, our exercise-prescription app, our email provider, and our website host. They only handle your data on our instructions.

2. Law enforcement or other government agencies, if required by law.

Third party platforms: Our online community and courses are hosted on Skool, and payment for those is taken through Skool too. Skool is a separate platform with its own privacy policy, so if you choose to join, anything you share there is handled by Skool, not by us. We'd encourage you to read their privacy policy before signing up.

Sending Data Outside the UK

Some of the software we use is run by companies based outside the UK, so your data mays be stored or processed abroad. Where that happens, we make sure appropriate safeguards are in place so your information stays protected to UK standards.

Data Security

We put security measures in place to protect against unauthorised access to, or alteration, disclosure, or destruction of, your data. All devices and software we use are password protected.

How Long We Keep It

We don't keep your information longer than we need to:

Clinical and treatment records: generally 8 years after your last treatment, as required.

Financial records: around 6 years, to meet HMRC requirements.

Marketing contacts: until you unsubscribe or ask us to stop.

General enquiries: a short period, then deleted if they don't lead to treatment.

Advertising

We run ads on platforms like Facebook and Google, which use cookies to help us reach people who might be interested in our services. These cookies only load if you agree to them through our cookie banner, and you can find more detail in our Cookie Policy.

When we send marketing emails, our email platform records standard engagement data-such as whether an email was opened or a link clicked-so we can see what's useful and improve what we send. We don't use this for profiling.

Your Rights

Under UK data protection law, you have the right to:

1. Access the personal information we hold about you.

2. Ask us to correct anything that's inaccurate.

3. Ask us to erase your information or restrict how we use it (where the law allows).

4. Ask for a copy of your information in a portable format.

5. Opt out of marketing communications at any time.

6. Complain to us directly if you're unhappy with how we've handled your data.

7. Complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113, if you're unhappy with how we've handled your data.

Automated Decision-Making

We don't use any automated decision-making or profiling-decisions about your care are always made by a person.

Data Breaches

We take the security of your information seriously. In the unlikely event of a breach that's likely to put your rights at high risk, we'll let you know without undue delay, explain what's happened, and tell you what we're doing about it.