Privacy Policy

Last updated: 12 August 2026

Nottingham Performance and Recovery Clinic Limited respects your privacy and is committed to protecting your personal information.

This policy explains what information we collect, why we collect it, how it is used and the rights you have under UK data-protection law.

1. Who we are

Nottingham Performance and Recovery Clinic Limited is the data controller responsible for the personal information described in this policy.

Company name: Nottingham Performance and Recovery Clinic Limited
Company number: 17380315
Registered in: England and Wales
Registered office: 10 Elston Hall Top Street, Elston, Newark, England, NG23 5NP
Website: nottinghamperformanceandrecoveryclinic.co.uk

For privacy enquiries, please contact us through the Contact page on our website or write to our registered office.

2. Information we may collect

Depending on how you contact us or use our services, we may collect:

  • Your name, address, telephone number and email address.

  • Appointment, booking and treatment information.

  • Messages and enquiries sent through our website, by email, telephone or social media.

  • Information needed to process payments and maintain transaction records.

  • Health information that you voluntarily provide through health-screening, consent or suitability forms.

  • Emergency-contact details where appropriate.

  • Marketing preferences.

  • Technical information including your IP address, browser type, device type and how you use our website.

  • Information collected through necessary cookies and any optional cookies you agree to accept.

We do not normally receive or store your complete payment-card details. Card payments are processed securely by our chosen payment provider.

3. How we collect your information

We may collect information:

  • When you contact us.

  • When you complete a website form.

  • When you book or pay for a session.

  • When you complete a health-screening or consent form.

  • During your visits and communications with our team.

  • Automatically through essential website technology.

  • Through optional analytics or marketing cookies where you have provided consent.

4. How and why we use your information

We may use your personal information to:

  • Respond to questions and enquiries.

  • Arrange, manage, confirm, change or cancel appointments.

  • Provide the services you have requested.

  • Assess whether a particular service appears suitable and safe for you.

  • Process payments, refunds and block bookings.

  • Maintain financial, administrative and treatment records.

  • Contact you about an existing booking or service.

  • Deal with complaints, disputes, insurance matters or legal claims.

  • Protect our website, systems, customers and business against misuse or fraud.

  • Improve our website and services.

  • Send marketing communications where you have agreed to receive them or where the law otherwise permits us to do so.

  • Meet our legal, regulatory, accounting and insurance obligations.

Our lawful bases for processing personal information may include:

  • Contract: where processing is necessary to arrange or provide a service you have requested.

  • Legal obligation: where we must retain or disclose information to comply with the law.

  • Legitimate interests: where processing is reasonably necessary to operate, protect or improve our business and does not override your rights.

  • Consent: where you have actively agreed to a particular use, including certain marketing activities, optional cookies or the processing of health information.

5. Health information

Information about your health is classed as special-category personal data and receives additional protection under UK data-protection law.

We may ask for relevant health information to assess suitability, identify potential contraindications and help provide our services safely. We will only request information that is reasonably necessary for these purposes.

Where required, we process this information with your explicit consent. You may withdraw that consent, but we may then be unable to provide a service where the information is necessary to assess suitability or safety.

We do not use health information for unrelated marketing or sell it to other organisations.

6. Marketing

We may send information about our clinic, services, offers or events where you have requested it or where the law permits us to contact existing customers about similar services.

You can unsubscribe at any time by following the instructions in the message or contacting us.

Choosing not to receive marketing will not affect essential communications concerning your appointments, payments or services.

7. Who we may share information with

We may share relevant information with trusted organisations that help us operate the clinic, including:

  • Appointment and booking-system providers.

  • Payment processors.

  • Website-hosting, email and IT-support providers.

  • Accountants, insurers, legal advisers and professional consultants.

  • Service suppliers acting on our instructions.

  • Government bodies, regulators, courts or law-enforcement agencies where disclosure is required or permitted by law.

We require service providers handling personal information on our behalf to protect it and use it only for the agreed purpose.

We do not sell or rent personal information.

8. International data transfers

Some technology providers may process information outside the United Kingdom.

Where this happens, we take reasonable steps to ensure appropriate safeguards are in place, such as UK adequacy regulations, approved contractual protections or other safeguards recognised under UK data-protection law.

9. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, insurance and regulatory requirements.

Our normal retention periods are:

  • General enquiries: up to 24 months after the last meaningful contact.

  • Booking, payment and transaction records: normally six years for accounting and legal purposes.

  • Health-screening, consent and service records: normally six years after the last session, unless a longer period is reasonably required for insurance, safeguarding or legal purposes.

  • Marketing information: until you unsubscribe or after a prolonged period without engagement.

  • Website security logs: normally no longer than 12 months unless required to investigate a security incident.

  • Cookie information: according to the periods explained in our Cookie Policy.

Information may be retained for longer where a complaint, dispute, safeguarding matter, insurance issue or legal claim is ongoing or reasonably anticipated.

When information is no longer required, it will be securely deleted, anonymised or destroyed.

10. How we protect your information

We use reasonable organisational and technical measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

Access is limited to staff and service providers who reasonably need the information to carry out their duties. However, no internet-based system can be guaranteed to be completely secure.

11. Cookies and website analytics

Our website may use cookies and similar technology to function correctly, remember preferences, maintain security and understand how visitors use the site.

Strictly necessary cookies may be used without consent where they are essential to the operation of the website.

Optional analytics, advertising or marketing cookies will only be used after you have been given an appropriate choice. Further details are provided in our Cookie Policy.

12. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • Ask for a copy of the personal information we hold about you.

  • Ask us to correct inaccurate or incomplete information.

  • Ask us to delete your information.

  • Ask us to restrict how your information is used.

  • Object to certain processing, including direct marketing.

  • Ask for information you provided to be transferred to you or another organisation.

  • Withdraw consent where processing relies on consent.

  • Complain about how we use your information.

Some rights are subject to legal exemptions. For example, we may need to retain certain information to meet legal, accounting, insurance or claims-related obligations.

We will normally respond to a valid request within one month. We may need to verify your identity before releasing or changing personal information.

13. Complaints

Please contact us first if you have concerns about how your information has been handled so that we have an opportunity to investigate.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Website: ico.org.uk
Complaints: ico.org.uk/make-a-complaint/

14. Children’s information

Our website is not intended to collect personal information directly from children without appropriate involvement from a parent or legal guardian.

Where a service is provided to someone under 18, we may require information and consent from their parent or legal guardian, depending on the person’s age, understanding and the nature of the service.

15. External websites

Our website may contain links to external websites or services. We are not responsible for their privacy practices. Visitors should read the privacy information provided by those organisations.

16. Changes to this policy

We may update this policy when our services, suppliers or legal obligations change. The latest version will be published on this page with a revised “last updated” date.