Last updated: 17th of May 2026

1. Introduction

Beyond the Finish Sports Therapy (“we”, “us”, “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website or receive treatment at our clinic in Derbyshire.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

2. What Personal Data We Collect

We may collect the following categories of personal data:

A. Contact Information

• Name
• Address
• Email address
• Telephone number

B. Medical & Treatment Information (Special Category Data)

• Medical history
• Injury details
• Treatment notes
• Relevant lifestyle information
• GP or consultant details

C. Appointment & Transaction Data

• Booking information
• Payment details (processed securely via third‑party providers; we do not store card details)

D. Website Data

• IP address
• Cookies and analytics data
• Browser/device information (Used to improve website performance and user experience)

3. How We Use Your Data

We use your data for the following purposes:

• To provide safe and effective sports therapy treatment
• To assess, plan, and record your treatment
• To contact you regarding appointments or changes
• To manage payments and invoices
• To meet legal and insurance obligations
• To improve our website and services
• With your consent, to send occasional service updates or marketing communications

These uses align with the lawful bases under UK GDPR: consent, contract, legitimate interests, and legal obligation. 

4. How We Store Your Data

Your data may be stored:

• In secure, password‑protected electronic systems
• In encrypted cloud‑based clinical software
• In paper form within a locked cabinet at the clinic (if applicable) 

We retain treatment records for the minimum period required by law and professional insurance (typically 7 years after your last appointment, or until age 25 for minors).

5. Sharing Your Data

We do not sell or share your data with third parties for marketing.

We may share information only when necessary:

• With your explicit consent (e.g., GP, consultant, coach)
• With insurers or legal representatives if required
• With IT or software providers who securely process data on our behalf
• When required by law (e.g., safeguarding concerns)

All third‑party processors comply with UK GDPR.

6. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (where legally permissible)
• Withdraw consent at any time
• Restrict or object to processing
• Request data portability
• Complain to the ICO (Information Commissioner’s Office)

To exercise your rights, contact us using the details below.

7. Cookies & Website Tracking

Our website uses cookies to:

• Improve functionality
• Analyse website traffic
• Enhance user experience

You can manage cookie preferences through your browser settings.

8. Marketing Communications

We will only send marketing emails or updates if you have explicitly opted in. You can withdraw consent at any time by emailing us.

9. Contact Details

Data Controller: Beyond the Finish Sports Therapy Location: Derbyshire, United Kingdom Email:beyondthefinishtherapy@outlook.com  Phone: 07301580497

If you have questions about this Privacy Policy or how your data is handled, please contact us.

10. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be available on our website.