Privacy Policy

This policy explains what information The Recovery Lab collects when you book a session or complete a consultation form, why we collect it, and what your rights are.

Last updated: 15 July 2026

The Recovery Lab is a sports massage practice based in East Preston, West Sussex, run by Jenny Windsor. For data protection purposes, The Recovery Lab is the "data controller" — we decide what information is collected and how it is used.

If you have any question about your information, or want to make any of the requests described below, contact us at jfit111@outlook.com or on 07789 938294.

When you book a session, we ask for:

• Your name, email address and phone number
• The session you chose, the date and time, and how often you'd like to repeat it
• Anything you choose to tell us in the notes box (for example an injury or problem area)

If you complete a consultation form before your first treatment, we also ask for:

• Your date of birth, address and postcode
• An emergency contact
• Your medical history, any medication you take, your reason for the visit, the area being treated, your pain level, your occupation and your activity levels
• Your consent and signature

Information about your health is treated as a special category of personal data, which means it gets extra protection in law. We only collect it because it is necessary to treat you safely, and only ever with your explicit consent, given on the consultation form.

We do not take card or payment details through this website, and we do not use any advertising, tracking or analytics cookies.

• To arrange and deliver your appointment — your name, contact details and booking details. Our legal basis is performance of a contract with you.
• To treat you safely — your health information, so we know what is safe and appropriate to do. Our legal basis is your explicit consent, and the provision of health treatment by a professional under a duty of confidentiality.
• To keep proper treatment records — as expected of a practising therapist and required by our insurer. Our legal basis is our legitimate interest in keeping accurate records and being able to answer any question about the care we gave.

We will never sell your information, and we do not use it for marketing unless you ask us to.

Your information is seen by Jenny Windsor. It is not shared with anyone else except the service providers who run the systems behind this website:

• Vercel — hosts the website and stores your booking in private storage that is not publicly readable.
• Google — the confirmation emails and the bookings record are handled through Google (Apps Script, Gmail and Google Sheets).
• Push notifications — if enabled, an alert about a new booking is delivered to the studio's own device through the browser's push service. Only your name, the session and the time appear in it.

These providers act on our instructions and may process data outside the UK. Where that happens, it is covered by the safeguards those providers have in place for international transfers.

We may also disclose information where the law requires it, or where there is a serious risk to someone's safety.

To save you retyping them, your name, email and phone are stored on your own device by your browser after you book. They are not sent anywhere by this feature, and clearing your browser data removes them.

The only cookie this site sets is a sign-in cookie for the studio's own staff portal. There are no advertising or tracking cookies.

Treatment records, including consultation forms, are kept for as long as our insurer and professional body require us to keep them — normally seven years after your last treatment. Booking details that never became a treatment are kept only as long as needed to manage the diary. After that, information is deleted.

You have the right to:

• Ask for a copy of the information we hold about you
• Have anything inaccurate corrected
• Ask us to delete it, or to restrict or object to how we use it
• Ask us to transfer it to someone else
• Withdraw your consent at any time — though we may not be able to treat you without the health information we need to do so safely

To do any of these, email jfit111@outlook.com. We will respond within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.

Bookings and consultation forms are held in private storage that cannot be read publicly, and the studio portal is protected by a passcode. No system is perfect, but we take care to limit who can see your information to those who need to.

If this policy changes, the new version will appear on this page with a new "last updated" date.

← Back to booking