Legal

Privacy Policy

Last updated: 29 July 2026

1. Who we are

This website is operated by Andrea Bennett, a qualified Kinesiologist practising in the United Kingdom. For the purposes of UK data-protection law, Andrea is the data controller for any personal information collected through this website or during the course of providing kinesiology services.

If you have any questions about this policy or how your data is handled, please contact us via the contact page.

2. What information we collect

We may collect and process the following personal data:

Contact details — name, email address, and phone number provided when you submit an enquiry or book an appointment.
Booking information — appointment dates, service type, and any notes you provide during the booking process.
Health information — details you share voluntarily during consultations or intake forms, which may include information about your physical or mental wellbeing.
Account credentials — if you create a client portal account, we store your email address and a securely hashed password.
Usage data — standard server logs (IP address, browser type, pages visited) collected automatically when you browse this site.

3. How we use your information

We use your personal data to:

Manage and confirm your appointments.
Send you appointment reminders and follow-up communications.
Respond to enquiries you send through the contact form.
Maintain accurate client records as required by professional practice standards.
Improve the website and services we offer.

We will never sell your personal data to third parties or use it for unsolicited marketing without your explicit consent.

4. Legal basis for processing

We process your data on the following legal bases under UK GDPR:

Contract — processing is necessary to provide the services you have booked.
Legitimate interests — to respond to enquiries and improve our services.
Consent — where you have given explicit consent, for example when sharing health information.
Legal obligation — where we are required to retain records by law or professional regulation.

5. How long we keep your data

Client records, including appointment history and health notes, are retained for a minimum of seven years following your last appointment, in line with standard healthcare practice guidelines. Contact enquiries that do not result in a booking are deleted after 12 months.

6. Sharing your information

We do not share your personal data with third parties except where necessary to operate this website (for example, our hosting provider) or where required by law. Any third-party processors are bound by data processing agreements and may not use your data for their own purposes.

7. Cookies

This website uses essential cookies to keep you logged in to your client portal. No third-party tracking or advertising cookies are used. You can disable cookies in your browser settings, but this may affect your ability to use the booking and portal features.

8. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (subject to legal retention obligations).
Object to or restrict certain processing.
Receive your data in a portable format.
Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us via the contact page. We will respond within 30 days. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Passwords are stored using industry-standard hashing and all data is transmitted over encrypted HTTPS connections.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically.