Privacy Policy for Recovery Inc

Recovery Inc (“we,” “our,” or “us”) is committed to safeguarding the privacy and personal information of our clients, partner organisations, academy and educational institution participants, and website visitors. This Privacy Policy outlines how we collect, use, and protect your data, and how we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect
We may collect the following types of information:

• Personal Information: Names, contact details, date of birth, and other information you provide when booking appointments or using our services.
• Health and Clinical Information: Medical history, injury details, treatment notes, and other special category data collected as part of sports therapy, rehabilitation, strength and conditioning, and clinical care.
• Usage Information: Data about how you interact with our website, such as browsing history and preferences.
• Academy, Club, and Educational Setting Information: Where we deliver services on behalf of, or in partnership with, football academies, sports clubs, colleges (including Oaklands College), or other educational or training institutions, we may collect participant information provided by the partner organisation, including team rosters, session attendance, and relevant medical or injury information.

2. How We Collect Information
We collect information through:

• Direct Interaction: When you (or, where applicable, a parent/guardian on your behalf) provide information by filling out forms on our website, contacting us, or using our services.
• Automated Technologies: We use cookies and similar technologies to collect data about your browsing patterns and preferences.
• Partner Organisations: Where we provide pitch-side, courtside, or on-site clinical cover under a partnership agreement (e.g. with a club, academy, or college), relevant personal and health information may be shared with us by that organisation to enable safe delivery of care.

3. How We Use Your Information
We use your information for the following purposes:

• To provide and improve our clinical, therapy, and wellness services.
• To communicate with you, such as sending appointment reminders or updates about our services.
• To understand your preferences and tailor our services to your needs.
• To deliver services safely and appropriately within academy, club, and educational settings, including sharing relevant clinical information with coaching or welfare staff on a need-to-know basis.
• To meet our legal and safeguarding obligations.

4. Data Protection
We are committed to protecting your information and take our responsibilities under the UK GDPR and Data Protection Act 2018 seriously. This includes:

• Lawful basis: We process personal data on the basis of consent, contract, legal obligation, or legitimate interest, as appropriate. Special category data (such as health information) is processed under explicit consent or for the provision of health/social care, in line with UK GDPR Article 9.
• Data minimisation: We only collect and retain data that is necessary for the purpose it was collected for.
• Security: We employ appropriate technical and organisational measures — including secure storage, access controls, and staff training — to prevent unauthorised access, disclosure, alteration, or destruction of your data.
• Retention: Personal and clinical data is retained only for as long as necessary to fulfil the purposes outlined in this policy, and in line with relevant professional and regulatory retention guidelines (e.g. clinical record-keeping standards).
• Data breaches: In the unlikely event of a data breach affecting your personal information, we will notify affected individuals and, where required, the Information Commissioner’s Office (ICO), in line with our legal obligations.

5. Working with Under-18s in Academy and Educational Settings
Recovery Inc delivers services in academy, club, and educational settings (including school, college, and university partnerships) where participants may be under the age of 18. We take additional care with data relating to children and young people:

• Parental/guardian consent: Where a participant is under 18, we seek consent from a parent or legal guardian before collecting or processing personal or clinical data, except where the young person is deemed competent to consent themselves (e.g. under Gillick competence principles) or where processing is necessary for safeguarding purposes.
• Working with partner institutions: Where we operate within an academy, college, or school (such as our on-site presence at Oaklands College, or with club academies), we agree data-sharing arrangements with the partner institution to ensure information about under-18s is only shared with staff who need it for coaching, welfare, or safeguarding purposes.
• Safeguarding: We comply with relevant safeguarding legislation and guidance (including Keeping Children Safe in Education, where applicable) and our own safeguarding policy. Where we have a safeguarding concern about a young person, we may share information with the partner institution’s designated safeguarding lead, statutory agencies, or other appropriate bodies, even without consent, where necessary to protect the young person’s welfare.
• Data minimisation for minors: We limit the personal and clinical data we collect from under-18s to what is strictly necessary for safe and effective delivery of our services.
• Retention: Data relating to under-18s is retained only for as long as necessary and in accordance with safeguarding and clinical record-keeping requirements, after which it is securely deleted or anonymised.
• Parental access: Parents or guardians may request access to, or correction of, their child’s personal data by contacting us using the details below, subject to any overriding safeguarding or legal considerations.

6. Sharing Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your data with:

• Trusted service providers who assist us in operating our business or delivering services to you.
• Partner academies, clubs, colleges, or educational institutions, strictly for the purpose of delivering agreed services and safeguarding participants.
• Statutory or regulatory bodies where required by law or for safeguarding purposes.

7. Your Rights
You (or, where applicable, your parent/guardian) have the right to:

• Access and request copies of your personal information.
• Correct any inaccuracies in your data.
• Request the deletion of your data under certain circumstances.
• Restrict or object to certain processing.
• Opt out of marketing communications.
• Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled.

8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or legal requirements. Please review this policy periodically for any updates.

9. Contact Us
If you have any questions or concerns about this Privacy Policy, how we handle your data, or our safeguarding practices, please contact us at info@recoveryinc.co.uk

Last Updated: 21/08/2026