Privacy Policy

Effective date: 16 May 2025
Muscle Health – 31 The Glebe, Haverhill, Suffolk, CB9 0DL
Email: craig.harley@musclehealth.uk

1. Introduction

At Muscle Health, I take your privacy seriously. This policy explains how your personal data is collected, used, and protected — whether you book an appointment, complete a form, browse the website, or contact me directly.

This policy follows the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who’s Responsible for Your Data

Data Controller: Craig Harley (Muscle Health)
Email: craig.harley@musclehealth.uk

This means I decide how and why your personal data is used.

3. What Information Is Collected

I may collect the following types of personal data:

Your name and contact details (email, phone number, address)
Information you provide when booking, completing a form, or making an enquiry
Appointment history and communication records
Health-related information relevant to your care
Website usage data (e.g. IP address, browser type)
Google Analytics data (e.g. pages visited, time spent)

Health-related details are submitted via secure online forms before your first session. I also write handwritten SOAP notes during each appointment, which are stored securely in physical files.

4. How Your Information Is Collected

When you book online using the Wix booking system
When you complete an online form or questionnaire
When you contact me by email, phone, or WhatsApp
When you browse the website (via cookies and analytics)
When you sign up to receive updates or resources

5. Why Your Information Is Used

Your data is used to:

Manage appointments and client records
Send appointment confirmations and updates
Respond to messages or questions
Deliver optional email updates (if requested)
Improve the website using usage analytics

I do not sell or share your data for advertising purposes.

6. Legal Grounds for Use

Your data is used based on one or more of the following legal bases:

Contract: to deliver the service you’ve booked
Consent: for marketing or updates (only if you’ve opted in)
Legitimate interest: to improve services or respond to enquiries
Legal obligation: for record-keeping, insurance, or health regulation

7. Marketing Communications

If you’ve previously booked or requested updates, you may occasionally receive helpful emails or news. You can unsubscribe at any time by clicking the link in the email or by contacting me.

WhatsApp is used only for direct communication about your appointments.

8. Sharing Your Data

Your data may be shared with:

Wix (for website and booking functions)
Google (for website analytics)
WhatsApp (for client communication)
Payment platforms (where used)

All third parties used are GDPR-compliant and only process data on my behalf.

9. Keeping Your Data Secure

I take steps to protect your data, including:

Secure Wix systems and encrypted forms
Handwritten treatment notes stored in locked files
Encrypted website access (SSL)

If you have concerns about your data, contact: craig.harley@musclehealth.uk

10. How Long Data Is Kept

Health records are kept for 7 years, in line with professional obligations
Booking and communication records are retained as needed
Marketing data is kept until you unsubscribe
Website analytics data is anonymised and used for trend analysis

11. Your Rights

You have the right to:

Access the data I hold about you
Ask for corrections or updates
Request deletion or restrict usage in some cases
Object to how your data is used
Withdraw consent (e.g. unsubscribe from emails)

To make a request, email: craig.harley@musclehealth.uk

If you’re concerned, you can contact the UK Information Commissioner’s Office (ICO) at: www.ico.org.uk

12. Cookies

This website uses cookies to:

Help it function securely and correctly
Track usage with Google Analytics
Remember visitor preferences where applicable

You can accept or reject cookies when you visit. Most browsers also allow you to manage cookies via settings. For more info, visit www.aboutcookies.org

13. Links to Other Websites

This website may link to third-party sites such as Google or Instagram. Their privacy policies will apply, and I am not responsible for their content or practices.

14. Updates to This Policy

This policy may change to reflect legal or service updates. The most recent version will always appear here.

15. Contact

Craig Harley
Muscle Health
31 The Glebe, Haverhill, Suffolk, CB9 0DL
craig.harley@musclehealth.uk