Privacy Policy

Last Updated 9th June 2026

Connective Therapy

Privacy Policy

At Connective Therapy  ("we", "us", "our"), we are committed to protecting your privacy and handling your personal information responsibly.

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the professional standards expected of members of the Institute of Sports and Remedial Massage (ISRM).

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services, book appointments, contact us, or visit our website.

1. Contact Details

Connective Therapy

Website: www.connectivetherapy.co.uk (http://www.connectivetherapy.co.uk/)

Email: mailto:connectivetherapyclinic@gmail.com

If you have any questions regarding this Privacy Policy or how your personal information is handled, please contact us using the details above.

2. Information We Collect

We may collect and process the following categories of personal information:

Personal Information

    •    Name

    •    Date of birth

    •    Address

    •    Email address

    •    Telephone number (where provided)

    •    Emergency contact details

Health Information

    •    Medical history

    •    Injury history

    •    Current health conditions

    •    Medication information

    •    GP details where relevant

    •    Consent records

    •    Clinical assessment findings

    •    Treatment notes and records

Appointment Information

    •    Appointment dates and attendance records

    •    Communications relating to appointments

Financial Information

    •    Payment records

    •    Invoices and transaction information

Website Information

When you visit our website, we may collect:

    •    IP address

    •    Browser type

    •    Device information

    •    Website usage information through cookies and analytics tools

3. How We Use Your Information

We use your information to:

    •    Provide soft tissue therapy, sports massage, remedial massage, injury rehabilitation, and related healthcare services.

    •    Create and deliver personalised exercise and rehabilitation programmes.

    •    Maintain accurate clinical records.

    •    Manage appointments and client communications.

    •    Process payments and invoices.

    •    Meet legal, professional, ethical, and insurance obligations.

    •    Improve our services and website functionality.

4. Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Contract

Processing necessary to provide services requested by you.

Legitimate Interests

Processing necessary for the effective administration and operation of our practice.

Legal Obligation

Processing required to comply with legal, professional, regulatory, or insurance requirements.

Healthcare Provision

Special category health information is processed for the provision of healthcare and therapeutic services.

Consent

Where required, we will obtain your explicit consent before processing certain information.

5. Confidentiality

All information you provide is treated as confidential.

However, confidentiality may be limited where:

    •    There is a serious risk of harm to yourself or another person.

    •    There are safeguarding concerns involving a child or vulnerable adult.

    •    Disclosure is required by law, court order, or regulatory authority.

    •    Professional consultation, insurance requirements, or legal obligations make disclosure necessary.

Where appropriate, we will seek to discuss any disclosure with you beforehand.

6. Clinical Records

To provide safe and effective treatment, we maintain clinical records which may include:

    •    Medical history

    •    Injury history

    •    Assessment findings

    •    Treatment plans

    •    Treatment notes

    •    Consent records

    •    Correspondence relating to your care

These records help ensure continuity of care, support professional practice, and meet legal and insurance requirements.

7. Storage and Security of Information

We take appropriate technical and organisational measures to protect your personal information.

These measures include:

    •    Secure password-protected systems

    •    Restricted access to client records

    •    Secure cloud-based storage

    •    Regular software and security updates

Client records, appointment information, treatment notes, consent forms, and invoices may be securely stored within Cliniko, our practice management system.

Access to information is restricted to authorised personnel only.

8. Sharing Information

We do not sell your personal information.

Information may be shared only where necessary with:

    •    Professional advisers

    •    Insurance providers

    •    Healthcare professionals involved in your care (with your consent where appropriate)

    •    Regulatory authorities

    •    Legal authorities where required by law

Information may also be disclosed where required in connection with complaints, investigations, safeguarding concerns, professional conduct matters, or insurance claims.

Any third party receiving information is expected to maintain appropriate confidentiality and data protection standards.

9. Retention of Records

Clinical records are retained in accordance with legal, professional, insurance, and regulatory requirements.

Unless a longer period is required by law, records will generally be retained for a minimum of seven years following the conclusion of treatment.

Records relating to children may be retained for longer where required by law.

10. Your Rights

Under UK data protection law, you have the right to:

    •    Request access to your personal information.

    •    Request correction of inaccurate information.

    •    Request restriction of processing in certain circumstances.

    •    Request deletion of information where applicable.

    •    Object to certain processing activities.

    •    Request transfer of your information where applicable.

    •    Withdraw consent where processing is based on consent.

Please note that some rights may be limited where information forms part of a healthcare record or where legal obligations apply.

11. Website Cookies and Analytics

Our website is hosted by Squarespace and may use cookies, analytics tools, and other technologies to improve user experience, understand website usage, and support website functionality.

Squarespace may automatically collect certain technical information when you visit our website, including your IP address, browser type, device information, and pages visited.

Cookies may collect information such as:

    •    Pages visited

    •    Time spent on the website

    •    Device and browser information

You can manage cookie settings through your browser preferences.

12. Online Booking and Third-Party Services

Appointments can be booked online through our Cliniko booking system.

When you make an appointment, you may be asked to provide personal information including your name, contact details, and relevant health information. This information is collected and stored securely to enable us to manage appointments, maintain clinical records, communicate with you regarding your treatment, and provide our services effectively.

To help us provide and manage our services, we use trusted third-party providers who may process personal information on our behalf. These may include:

    •    Squarespace for website hosting and website management.

    •    Cliniko for online appointment booking, client records, treatment notes, consent forms, invoicing, and practice management.

    •    Rehab My Patient for creating and delivering personalised exercise and rehabilitation programmes.

    •    Email providers for communication.

    •    Payment processors for handling payments.

    •    Website analytics providers.

Where appropriate, limited personal information may be shared with these providers to enable them to perform services on our behalf.

We take reasonable steps to ensure these providers maintain appropriate security standards and comply with applicable data protection requirements.

Where personal information is transferred outside the United Kingdom, appropriate safeguards will be in place to protect your information.

13. Social Media

We maintain professional social media accounts to share information about our services and engage with the public.

If you interact with us through social media platforms such as Facebook or Instagram, your information may also be processed by those platforms in accordance with their own privacy policies.

Please avoid sending sensitive health information or confidential treatment information through social media messaging services.

Administrative enquiries may be accepted through social media; however, treatment advice and clinical discussions will not be provided through these platforms.

14. Complaints

If you have concerns about how your personal information has been handled, please contact us first so we can attempt to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for data protection matters.

Further information is available at www.ico.org.uk (http://www.ico.org.uk/).

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on our website and the revised version will indicate the date of the latest update.

By using our services or providing your information to us, you acknowledge that you have read and understood this Privacy Policy.