Privacy Statement

Last updated: 15/05/2026

This Privacy Statement explains how The Right Therapy collects, uses, stores and protects personal information.

We take privacy seriously, particularly because some of the information we collect may relate to health, symptoms, treatments, wellbeing, injuries, lifestyle, nutrition or other sensitive matters.

1. Who we are

This website is operated by The Right Therapy.

Our clinic is based at:

The Right Therapy
Radclyffe House
66–68 Hagley Road
Suite L6, Second Floor
Edgbaston
Birmingham
B16 8PF
United Kingdom

Telephone: 07366 442232

For the purposes of UK data protection law, The Right Therapy is the data controller for the personal information we collect and use.

2. How we collect personal information

We may collect personal information when you:

use our website;
make an online booking;
contact us by telephone, email, website form or social media;
complete a consultation form or health questionnaire;
attend an appointment;
pay for a treatment;
sign up to receive newsletters or updates;
provide feedback, a review or testimonial;
interact with our social media pages;
use our website’s search, cart, checkout or booking features.

3. Personal information we may collect

Depending on how you use our website and services, we may collect:

Contact details

This may include your name, email address, telephone number, postal address and communication preferences.

Booking information

This may include appointment date, appointment time, treatment selected, therapist selected, booking notes, cancellation or rescheduling history, and payment status.

Health and treatment information

This may include information about symptoms, injuries, pain, medical history, medication, allergies, pregnancy, lifestyle, diet, nutrition, emotional wellbeing, treatment preferences, treatment notes, contraindications and information you choose to share before, during or after a treatment.

This type of information may be classed as special category data under UK data protection law.

Payment information

If you pay online, payments may be processed by Stripe or another payment provider. We may receive confirmation of payment, transaction reference, payment amount, payment status, refund status and limited payment details.

We do not store your full card number on our website.

Website and technical information

This may include IP address, browser type, device type, pages visited, referring website, approximate location, date and time of visit, cookie identifiers, security logs and similar technical information.

Marketing information

If you sign up for newsletters or informative emails, we may collect your name, email address, consent status, signup date, unsubscribe status and email engagement information.

Reviews and testimonials

If you provide a review or testimonial, we may collect your name, review content, rating, treatment type, image if supplied, and any related permission you give us to publish it.

4. Why we use personal information

We use personal information to:

respond to enquiries;
manage bookings and appointments;
provide treatments and related services;
assess treatment suitability and safety;
keep treatment records;
process payments, refunds and invoices;
send appointment confirmations, reminders and service messages;
manage cancellations and rescheduling;
deal with complaints, disputes or safeguarding concerns;
send newsletters or marketing emails where you have opted in;
publish testimonials or reviews where appropriate;
improve our website and services;
maintain website security;
comply with legal, tax, accounting, insurance and regulatory obligations.

5. Our lawful basis for using your information

Under UK GDPR, we must have a lawful basis for using your personal information.

Depending on the circumstances, we may rely on:

Contract

We use your information where necessary to provide a treatment or service you have requested, manage your booking, take payment, or communicate with you about your appointment.

Legitimate interests

We may use information where necessary for our legitimate business interests, provided your rights do not override those interests. This may include responding to enquiries, keeping basic business records, improving our services, protecting the website, managing reviews, and dealing with disputes.

Consent

We rely on consent for optional marketing emails, some cookies, and certain situations where you choose to provide information or give permission for a specific use.

You can withdraw consent at any time.

Legal obligation

We may use or keep information where required by law, for example tax, accounting, insurance, legal claims, safeguarding or regulatory obligations.

6. Special category data

Some information we collect may relate to your health, physical condition, symptoms, injuries, diet, wellbeing or treatment needs. This is treated as special category data under UK data protection law.

Where we process special category data, we will only do so where we have a lawful basis under Article 6 UK GDPR and a separate condition under Article 9 UK GDPR.

Depending on the situation, we may rely on:

your explicit consent;
the provision of health, wellbeing or therapy-related services;
the establishment, exercise or defence of legal claims;
reasons of substantial public interest, where applicable.

We will only ask for health-related information that is relevant to assessing suitability, safety, treatment planning, treatment delivery or aftercare.

7. Marketing emails and newsletters

If you choose to receive newsletters or informative emails from us, we will use your details to send you relevant updates, offers, news or information about our services.

You can unsubscribe at any time by using the unsubscribe link in our emails, where available, or by contacting us directly.

We do not sell your personal information to third parties for marketing.

8. Payment processing

Online payments may be processed using Stripe checkout or another payment provider.

When you make an online payment, your payment information is handled by the payment provider. They may collect and process transaction data such as name, email address, billing details, card/payment method information, payment amount, date of payment, merchant details, refund information and fraud prevention information.

Payment providers may act as independent controllers or processors depending on the activity. You should also read their privacy information when making a payment.

9. Contact forms and email

If you contact us through a website form or by email, we will use the information you provide to respond to your enquiry and keep a record of the communication.

Please avoid sending highly sensitive medical information by email unless it is necessary. Email is not always a fully secure method of communication.

10. Cookies and website analytics

Our website uses cookies and similar technologies. Some are necessary for the website to work properly. Others, such as analytics or marketing cookies, should only be used with your consent.

Please see our Cookie Policy for more information.

11. Who we share information with

We only share personal information where necessary and appropriate.

We may share information with:

therapists and staff working with The Right Therapy;
website hosting providers;
website maintenance and security providers;
booking system providers;
payment providers such as Stripe;
email, newsletter or communication service providers;
professional advisers such as accountants, insurers, legal advisers or business advisers;
IT support providers;
regulators, public authorities, courts or law enforcement where required;
healthcare professionals or emergency services where necessary to protect vital interests or where legally required.

We do not sell your personal information.

12. International transfers

Some of our service providers may store or process data outside the UK.

Where this happens, we will take reasonable steps to ensure appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, UK international data transfer agreements, or other lawful transfer mechanisms.

13. How long we keep personal information

We only keep personal information for as long as necessary.

As a guide:

enquiry records may be kept for up to 12 months after the enquiry has been dealt with;
booking and appointment records may be kept for up to 7 years;
treatment notes and health-related records may be kept for up to 7 years after your last appointment, unless a longer period is legally required or appropriate;
financial and transaction records may be kept for up to 6 years for tax and accounting purposes;
marketing records are kept until you unsubscribe or ask us to remove you, although we may keep a suppression record to make sure we do not contact you again;
website security logs may be kept for a shorter period unless needed to investigate misuse or security issues;
testimonials may remain published until withdrawn, replaced, or no longer relevant.

These periods may be changed where required for legal, insurance, safeguarding, dispute or regulatory reasons.

14. How we protect your information

We use reasonable technical and organisational measures to protect personal information.

These may include secure website hosting, access controls, password protection, website security tools, limited access to client information, staff confidentiality, secure payment processing and regular website maintenance.

No website, email system or online service can be guaranteed to be completely secure. Please take care when sending personal or sensitive information online.

15. Your data protection rights

Under UK data protection law, you may have the right to:

access your personal information;
ask us to correct inaccurate information;
ask us to erase information in certain circumstances;
ask us to restrict processing in certain circumstances;
object to processing in certain circumstances;
ask for a copy of certain information in a portable format;
withdraw consent where processing is based on consent;
complain to the Information Commissioner’s Office.

These rights are not absolute and may depend on the circumstances.

16. Complaints

If you have a concern about how we handle your personal information, please contact us first so we can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

17. Children and young people

Our services are generally intended for adults. If we provide services to anyone under 18, we may require involvement or consent from a parent or guardian, depending on the circumstances and the nature of the treatment.

We do not knowingly use children’s personal information for marketing.

18. Third-party websites and social media

Our website may link to third-party websites or platforms, including social media pages, video platforms, review platforms, map services and payment providers.

Those third parties are responsible for their own privacy practices. Please read their privacy notices before using their services.

19. Changes to this Privacy Statement

We may update this Privacy Statement from time to time. The latest version will be published on this page with an updated date.

20. Contact us

If you have questions about this Privacy Statement or want to exercise your data protection rights, please contact: