This privacy policy was created on 26/05/2025

1. Introduction

This Privacy Policy explains how we collect, use, and protect your personal data when you use the services of Real Recovery, a mobile sports massage therapy business operating in United Kingdom. We are committed to safeguarding your privacy in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We may collect the following types of personal data:
- First and last name, phone number
- Email address
- Medical information relevant to your therapy sessions
- Booking and appointment details
- Communication records via email or website contact forms

3. How We Collect Your Data

We collect your data when you:
- Book an appointment via our Wix website
- Provide medical information through the Physiodiary platform
- Communicate with us via email or contact forms or social media platforms
- Attend therapy sessions where additional notes may be taken

4. Why We Use Your Data

We use your data to:
- Provide massage therapy services tailored to your medical needs
- Manage bookings and appointments
- Communicate with you regarding your treatment or our services
- Comply with legal or regulatory obligations

5. Legal Bases for Processing

We rely on the following legal bases under UK GDPR:
- Your consent for processing sensitive medical data
- The necessity of processing for the performance of a contract
- Our legitimate interests in operating and improving our services
- Compliance with legal obligations

6. Who We Share Your Data With

We do not sell or rent your personal data. However, we may share your data with:
- Physiodiary for secure note-taking and session documentation
- Wix for appointment scheduling
- Email service providers for communication
- Regulatory authorities if required by law

7. International Transfers

Some of our service providers (e.g., Wix, Physiodiary) may store data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

8. How Long We Keep Your Data

We retain your data only as long as necessary for the purposes outlined in this policy or to comply with legal obligations. Medical records are kept for a minimum of 7 years in accordance with industry standards.

9. Your Data Protection Rights

You have the following rights under the UK GDPR:
- The right to access your data
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object to processing
- The right to withdraw consent at any time

10. Cookies

Our Wix website may use cookies to enhance your browsing experience. You will be informed of the use of cookies and may manage your preferences accordingly.

11. Contact Us

If you have any questions about this policy or wish to exercise your rights, please contact us at:
Real Recovery (Juan Sanchez)
realrecoverytherapy@gmail.com

12. Complaints

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: https://ico.org.uk
Phone: 0303 123 1113