Privacy Policy

Privacy Policy (GDPR)

Last Updated: 30.8.26

1. Introduction

Welcome to Muscle Medic London. We provide sports massage therapy, personal training, online coaching and related wellness services.

We are committed to protecting your personal data and respecting your privacy in accordance with the UK GDPR and Data Protection Act 2018. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Data Controller

Muscle Medic London

sam@musclemediclondon.com

3. Personal Data We Collect

Due to the nature of sports massage therapy, personal training and online coaching, we may collect:

a) General Personal Data

• Name
• Date of birth
• Contact details (email, phone number, address)
• Emergency contact details

b) Special Category Data (Health Information)

• Medical history (e.g., injuries, surgeries, chronic conditions)
• Current medications
• Lifestyle information relevant to treatment (e.g., physical activity levels)
• Treatment notes and assessments

This data is necessary to provide safe and effective treatment.

c) Technical Data

• IP address
• Website usage data (if you use our website)

4. How We Collect Your Data

We collect your data through:

• Client consultation forms (paper or digital)
• Booking systems (online or in person)
• Direct communication (email, phone, in person)
• Website cookies and analytics (if applicable)

5. Legal Basis for Processing

We rely on the following lawful bases:

• Contract: To provide you with sports massage, personal training and online coaching services
• Legal obligation: For record keeping and insurance purposes
• Legitimate interests: To manage and improve our services
• Explicit consent: For processing health-related (special category) data

You may withdraw consent at any time.

6. How We Use Your Data

We use your data to:

• Assess your suitability for treatment and training
• Provide safe and effective sports massage therapy, personal training and online coaching.
• Maintain treatment records and services provided
• Manage appointments and communicate with you
• Meet legal, insurance, and professional obligations

We do not use your health data for marketing purposes.

7. Data Sharing

We may share your data with:

• Healthcare professionals (only with your consent or if necessary for your care)
• Insurance providers (if required for claims)
• Legal or regulatory authorities (if required by law)

We will never sell your personal data.

8. Data Storage and Security

• Records may be stored securely in locked physical storage and/or encrypted digital systems
• Access is restricted to authorised personnel only
• We take appropriate measures to prevent unauthorized access, loss, or misuse

9. Data Retention

We retain your records in line with professional and legal requirements:

• Adult client records: typically 7 years after last treatment
• Children’s records: until age 25 (or 26 if treated at 17)

After this period, your data will be securely destroyed.

10. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (where applicable)
• Restrict or object to processing
• Data portability
• Withdraw consent (for health data processing)

To exercise these rights, contact us at sam@musclemediclondon.com.

11. Cookies

If you use our website, we may use cookies to improve your experience. You can control cookie settings via your browser.

12. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the UK supervisory authority:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted with an updated revision date.

14. Contact 

If you have any questions about this Privacy Policy or your data, please contact:

Muscle Medic London
sam@musclemediclondon.com