Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.

Privacy Policy

Activate Sports Therapy LTD | Last updated: 22 October 2026

This notice explains how we collect, use, share and protect personal information in connection with our website and sports therapy services.

1. Who we are

Activate Sports Therapy LTD (company number 11173787) is the data controller responsible for the personal information described in this notice. Our website is activatesportstherapy.co.uk. Our registered office is Dunham House, Cross Street, Sale, Greater Manchester M33 7HH.

For privacy enquiries or requests, email garth@activatesportstherapy.co.uk. This notice applies to our website, customer accounts, appointment and payment administration, and sports therapy services. This policy is intended to be published at https://activatesportstherapy.co.uk/privacy.

2. Information we collect

We may collect your name, contact details, date of birth, gender where relevant to care, account information, appointment and booking history, communications, payment status and transaction references, and marketing preferences.

For assessment and treatment, we collect health information including medical history, symptoms, injuries, consultation responses, pain assessments, treatment notes and rehabilitation plans. Where relevant to a child’s treatment, we collect parent or guardian contact details.

When you visit the website we may receive technical information such as IP address, browser details, pages viewed and website interactions, subject to the settings and controls described in our separate Cookie Policy.

3. How we obtain information

We receive information directly from you when you contact us, book or attend appointments, complete consultation forms, create an account, or make a payment. We may also receive account details from Facebook Login where you choose that option, and technical website information through our analytics and advertising services.

4. Why we use information and our lawful bases

We use contact, account and booking details to arrange appointments, communicate about services and administer customer accounts. Our usual Article 6 basis is performance of a contract or steps requested before entering into one.

We process health and treatment information where necessary to assess patients, deliver sports therapy and rehabilitation, and maintain clinical records. For Article 6 UK GDPR, we generally rely on performance of a contract (Article 6(1)(b)) for treatment delivery, and legitimate interests (Article 6(1)(f)) where appropriate for safe record-keeping and defending claims. For health data, our intended Article 9 condition is Article 9(2)(h), health or social care treatment, together with Schedule 1 paragraph 2 of the Data Protection Act 2018, provided the professional confidentiality requirement in Article 9(3) and section 11 is met. Where that condition cannot be met, we must establish a different valid condition before processing; agreement to treatment is not by itself GDPR consent.

We process payment and financial records to administer transactions and meet applicable legal obligations. We use essential technical information to operate and secure the website and accounts, relying where appropriate on legitimate interests.

Where enabled, we use Google Analytics to understand website use and Meta Pixel to measure advertising and audiences. Non-essential tracking is subject to applicable cookie and privacy consent requirements. Marketing communications are sent only where permitted under applicable law, including the rules on consent and the limited existing-customer exception where applicable. You can opt out of marketing at any time.

We do not use medical consultation details or treatment notes for Meta Pixel advertising targeting.

5. Facebook Login

If you choose to sign in using Facebook Login, Meta may provide the account information authorised by the permissions requested and granted, such as your name, email address, profile picture and an app-specific Facebook user identifier. The precise information received depends on the integration and your choices.

We use this information to identify you, create or link your Activate Sports Therapy account and provide access to account features. We do not receive your Facebook password. Using Facebook Login does not itself give us access to your Facebook messages or medical records.

You may remove the connection through your Facebook settings. To request deletion of information held by Activate Sports Therapy associated with Facebook Login, email garth@activatesportstherapy.co.uk with the subject “Facebook Login data deletion”. We will verify your identity and delete information we are no longer required to keep, explaining where clinical, accounting or other records must be retained. Disconnecting Facebook does not automatically delete your treatment records.

6. Who we share information with

We use Stripe to process payments, Google Analytics to analyse website usage, and Meta Pixel for advertising measurement and Facebook Login for authentication where selected. These providers process information in accordance with their applicable roles and terms.

We may also use website hosting, technical support and record-management providers as necessary to deliver and secure our services. We share only the information reasonably required for the relevant service, subject to appropriate safeguards. We may disclose information where legally required or necessary to establish, exercise or defend legal claims.

We do not sell patient medical records to advertisers. Our separate Cookie Policy explains the tracking technologies used on the website.

7. International processing

We operate in the United Kingdom. Stripe, Google Analytics and Meta (including Facebook Login and Meta Pixel) may process personal information outside the UK or permit overseas access. We do not claim that all personal data remains in the UK. We do not intentionally share clinical treatment notes with these advertising or analytics providers.

Where UK GDPR restricted-transfer rules apply, we use an applicable UK adequacy arrangement (including the UK Extension to the EU–US Data Privacy Framework for eligible certified recipients), or appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum to standard contractual clauses, as applicable. You may request information about relevant safeguards using our contact email.

8. How long we keep information

We retain personal information only as long as necessary for its purpose, subject to applicable legal, tax, insurance and professional record-keeping obligations.

We retain clinical records according to a documented retention schedule based on the nature of the treatment, professional guidance, insurance conditions and potential legal claims. Our previous proposed minimum of three years for adults and until age 18 for children is not adopted as an automatic deletion rule. We review records when the applicable period expires and securely delete or anonymise them unless a lawful reason requires further retention. The exact clinical retention schedule must be verified with our insurer and the Society of Sports Therapists before final publication.

Financial records are retained for the period required by applicable tax and accounting law. Account and login information is retained while needed for the account and then removed or anonymised unless a lawful reason requires further retention. Backup copies may persist temporarily in accordance with secure backup cycles.

9. Security and confidentiality

We use appropriate technical and organisational safeguards to protect information against unauthorised access, loss or misuse, including access controls and secure systems. Access to clinical records is limited to those who need it for legitimate care or administration purposes. We maintain confidentiality in line with applicable professional obligations, including those relevant to members of the Society of Sports Therapists.

No internet-based service can be guaranteed completely secure. Please notify us promptly at garth@activatesportstherapy.co.uk if you suspect unauthorised access to your information.

10. Your data protection rights

Subject to applicable legal conditions and exemptions, you may request access to your personal information, correction of inaccurate data, erasure, restriction of processing, portability of certain data, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

Please email garth@activatesportstherapy.co.uk to exercise these rights. We may need to verify your identity. A request to delete an account does not necessarily require us to erase clinical or financial records that must lawfully be retained.

11. Complaints and the ICO

Please contact us first at garth@activatesportstherapy.co.uk if you have a concern. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at https://ico.org.uk/.

12. Cookies and other websites

Our website uses cookies and similar technologies. For details of their purposes, choices and controls, see our separate Cookie Policy: https://activatesportstherapy.co.uk/cookie-policy/. This privacy notice does not replace that policy or the website’s consent controls.

Links to third-party websites are governed by the privacy notices of those websites.

13. Changes to this notice

We may update this notice to reflect changes in our services, providers or legal obligations. The current version will be published on our website with its last-updated date.