← Back to Recovertorium

Effective September 2026

Privacy Policy

At Recovertorium ("we", "us", "our"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal and health information when you visit our website, book our services, or receive treatments.

1. Information We Collect

To provide safe, effective, and tailored sports recovery, deep tissue massage, and injury rehabilitation services, we may collect and process the following data:

  • Personal Details: Name, email address, phone number, date of birth, address, and emergency contact details.
  • Health and Medical Information: Medical history, details of past or present injuries, training routines, pain levels, lifestyle factors, and consultation notes recorded during your sessions.
  • Transaction and Booking Data: Details of payments, services purchased, booking history, and credit package balances.
  • Technical Data: IP address, browser type, and usage data collected automatically when you visit our website.

2. Legal Basis for Processing

We process your personal data under the following legal grounds under the UK GDPR:

  • Contractual Necessity: To manage your bookings, process payments, and fulfil our service agreement with you.
  • Explicit Consent: For processing health data (special category data) collected during consultation forms and treatment assessments to ensure safe treatment delivery.
  • Legitimate Interests: To improve our services, manage client relationships, and send relevant treatment follow-ups or business updates.
  • Legal Obligation: To comply with professional insurance requirements, accounting standards, and relevant UK laws.

3. How We Use Your Information

Your information is used solely to:

  • Assess, plan, and deliver safe, personalised sports rehabilitation and recovery treatments.
  • Manage your bookings, cancellations, and credit package redemptions.
  • Send appointment confirmations, reminders, and relevant treatment advice.
  • Maintain accurate treatment records required by our professional insurers and regulatory standards.
  • Process payments securely.

4. How We Share Your Information

We respect your privacy and will never sell or rent your personal information to third parties. We may share your data only in the following limited circumstances:

  • Service Providers: Secure third-party platforms that assist our operations, such as website hosting, online booking software, and payment processing systems.
  • Medical Professionals: Only with your explicit consent, if we need to liaise with your GP or other health specialists regarding your care.
  • Legal and Insurance Requirements: If required by law, court order, or to establish, exercise, or defend our legal rights or insurance claims.

5. Data Retention

We retain your personal and health records in line with UK professional guidelines and insurance policies:

  • Adult client health records are retained for a minimum of 7 years from the date of your last treatment.
  • Records for minors (under 18) are retained until the client turns 25 (7 years after reaching age 18).
  • After the required retention period, your data will be securely deleted or anonymised.

6. Data Security

We implement strict administrative, technical, and physical security measures to safeguard your data against loss, theft, unauthorised access, disclosure, or alteration. Physical consultation forms are stored securely, and digital records are protected using encrypted, password-controlled systems.

7. Your Rights Under UK GDPR

You have several rights regarding your personal information, including:

  • Access: The right to request a copy of the personal data we hold about you.
  • Correction: The right to request that we correct inaccurate or incomplete data.
  • Erasure: The right to request deletion of your personal data, subject to legal and insurance retention obligations for medical records.
  • Restriction: The right to request that we limit the processing of your data in certain circumstances.
  • Withdrawal of Consent: The right to withdraw your consent for data processing at any time where processing relies on consent.

To exercise any of these rights, please contact Dan Symons directly at dan@recovertorium.com.

8. Cookies and Analytics

Our website may use essential cookies to ensure proper site functionality, along with analytics tools to help us understand site usage and improve client experience. You can control cookie settings through your internet browser preferences.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or relevant laws. The latest version will always be accessible on our website.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact Dan Symons via email at dan@recovertorium.com.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe your data has been handled improperly.