Privacy Policy

Last Updated: 09/05/2025

On Track Therapy UK is committed to protecting and respecting your privacy. This policy explains how we collect, use, and store your personal data when you use our website or services.

We are On Track Therapy UK, a sports massage therapy provider based in Norfolk, England. You can contact us at:

Email: ontracktherapyuk@gmail.com
Phone: 07484704280
Address: The Stalham Poppy Centre, Recreation Road, NR12 9BJ

We may collect and process the following data:

- Personal information: name, email, phone number, address, date of birth.

- Health information: relevant medical history or conditions (with your explicit consent).

- Booking information: appointment dates, times, and preferences.

- Website data: IP address, browser type, and how you interact with our website (via cookies or analytics tools).

We use your data to:

- Provide and manage appointments and services.
- Communicate with you (e.g., confirmations, reminders, updates).
- Maintain treatment records in compliance with health and legal obligations.
- Improve our website and services.

We will not use your personal data for marketing unless you have given explicit consent.

We process your data under the following lawful bases:
- Consent – where required (e.g., collecting health data).
- Contract – to provide agreed services.
- Legal obligation – for record-keeping or compliance with UK law.
- Legitimate interests – to improve service delivery and respond to enquiries.

Your data is securely stored on encrypted systems, and we take all reasonable steps to protect it from unauthorised access, alteration, or disclosure.

We retain personal and health data for a minimum of 7 years in accordance with UK professional and legal requirements.

We do not sell or share your data with third parties, except:
- With your explicit consent.
- When legally required (e.g. to comply with law enforcement or health regulations).
- With service providers who help us operate the website or booking system (e.g. payment processors, booking apps), under strict data processing agreements.

Under UK GDPR, you have the right to:
- Access your personal data.
- Correct inaccurate or incomplete data.
- Request erasure of your data (“right to be forgotten”).
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time (if processing is based on consent).
- Lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk

Our website uses cookies to enhance user experience. You can manage or disable cookies in your browser settings. For more information, please see our [Cookie Policy] (if you have one).

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.