Who are we.

Training and Treatment provides sports therapy, rehabilitation, sports massage and exercise-based support for active individuals.

For the purpose of UK data protection law, Training and Treatment is the data controller for the personal information we collect and process.

Information we may collect.

We may collect and process the following types of personal information:

• Name

• Email address

• Phone number

• Address, where required

• Date of birth, where required

• Appointment and booking details

• Payment and transaction information

• Information submitted through contact forms or enquiry forms

• Health, injury, medical history, training history and lifestyle information provided through intake forms, consultations or treatment sessions

• Treatment notes, rehabilitation plans, exercise recommendations and progress updates

• Communication records, including emails, text messages or booking-related messages

Information collected automatically through our website.

When you visit our website, certain information may be collected automatically, including:

• Browser type and version

• Device type

• Operating system

• Pages visited

• Time spent on the website

• How you arrived at the website

• Approximate location data

• Anonymised or truncated IP address

• Website performance and usage data

This information helps us understand how visitors use the website, improve user experience, monitor performance and keep the website secure.

Cookies.

Our website may use cookies and similar technologies to improve your browsing experience, analyse website traffic and support website functionality.

Cookies are small files placed on your device when you visit a website. Some cookies are essential for the website to work properly, while others may be used for analytics, performance tracking or marketing purposes.

Where required, we will ask for your consent before placing non-essential cookies on your device. You can usually manage or disable cookies through your browser settings.

How we use your information.

We may use your personal information to:

• Respond to enquiries

• Manage bookings and appointments

• Provide sports therapy, rehabilitation, sports massage and related services

• Complete assessments, treatment notes and rehabilitation planning

• Process payments and manage invoices

• Send appointment confirmations, reminders and service updates

• Communicate with you about your care, treatment or rehabilitation

• Send marketing emails or updates where you have opted in

• Improve our website, services and client experience

• Maintain accurate business and clinical records

• Meet legal, tax, accounting and insurance obligations

• Protect the security and integrity of our website and systems

Lawful basis for processing your information.

We only process personal information where we have a lawful basis to do so. Depending on the reason we are using your information, this may include:

• Contract: to provide services you have booked or requested.

• Consent: where you have given clear permission, such as for marketing communications or certain health-related information where required.

• Legitimate interests: to manage and improve our business, communicate with clients, maintain records and operate our website securely.

• Legal obligation: where we are required to keep certain records for tax, accounting, insurance or legal purposes.

Where we process health-related information, we will only do so where necessary to provide appropriate treatment, rehabilitation, advice or support, and where an appropriate lawful basis and special category condition applies.

Marketing communications.

We may contact you with updates, educational content, service information, offers or clinic news where you have opted in or where we have a legitimate interest to keep existing clients informed.

You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails, replying to a message, or contacting us directly.

We will not sell your personal information to third parties.

Sharing your information.

We may share your information with trusted third-party service providers where necessary to operate our business. This may include:

• Website hosting providers

• Booking system providers, such as Acuity Scheduling

• Website platforms, such as Squarespace

• Payment processors, such as Stripe

• Email marketing platforms

• Accounting or bookkeeping software

• Professional advisers, including accountants, insurers or legal advisers

• IT, security or data storage providers

These third parties are only permitted to process your information where necessary to provide their services to us and must handle your data securely.

We may also disclose personal information if required by law, regulation, insurance, legal claim, safeguarding concern, or where necessary to protect the rights, safety or wellbeing of you or another person.

How we store and protect your information.

We take reasonable steps to keep your personal information secure and protect it from unauthorised access, loss, misuse or disclosure.

Your information may be stored within secure booking systems, website platforms, email systems, payment platforms, clinical records or business administration systems.

However, no method of transmission over the internet is completely secure. While we take appropriate steps to protect your data, we cannot guarantee the absolute security of information sent electronically.

How long we keep your information.

We will only keep your personal information for as long as necessary for the purpose it was collected, including to provide services, maintain business records, meet legal obligations, resolve disputes, support insurance requirements and protect our legitimate interests.

Health, treatment and client records may be retained for longer periods where required for clinical, insurance or legal purposes.

When information is no longer required, we will delete it securely or anonymise it where appropriate.

Your data protection rights.

Under UK data protection law, you have rights in relation to your personal information. These may include the right to:

• Access the personal data we hold about you

• Request correction of inaccurate or incomplete data

• Request deletion of your data in certain circumstances

• Object to certain types of processing

• Request restriction of processing

• Request transfer of your data

• Withdraw consent where processing is based on consent

• Complain to the Information Commissioner’s Office if you are unhappy with how your data has been handled

To exercise any of these rights, please contact us using the details provided in this policy.

We may need to verify your identity before responding to a request.

Third-party links.

Our website may contain links to third-party websites, platforms or services. These websites have their own privacy policies and we are not responsible for how they collect, use or protect your information.

You should review the privacy policies of any third-party websites before submitting personal information to them.

Changes to this Privacy Policy.

We may update this Privacy Policy from time to time to reflect changes in our business, website, services, systems or legal obligations.

Any updates will be posted on this page with a revised version date.

Contact us.

Questions, requests or concerns about this Privacy Policy or how your personal information is handled should be sent to:

Training and Treatment

CrossFit Wessex, Winnall, Winchester, SO23 7RX

Email: Info@trainingandtreatment.uk