Privacy policy

This site belongs to Aurelia Byrne, trading as Aurelia Byrne Sports Therapy, a sole trader based in Hackney, London. I am the data controller for any personal information collected here. Contact: [hello@aureliabyrnept.com].

What I collect and why

• Enquiry form: your name, email, phone number if you give it, and your message. I use these to reply to you about training or massage. Legal basis: your consent, given by ticking the box on the form.
• Client account (if you become a client): your contact details, your bookings, messages between us, and the payment status of your sessions. Legal basis: performing our agreement for training or massage.
• Health information (clients only): the pre-exercise questionnaire (PAR-Q) and anything you tell me about medical conditions. This is special category data under UK GDPR. I collect it only inside your client account, only with your explicit consent, and only so I can train you safely. I never collect it through the public enquiry form.

Where it is stored

On servers run by my hosting providers [Vercel and Neon], encrypted in transit and at rest. Emails are sent through [Resend]. Only I can see client records; clients can see their own.

How long I keep it

• Enquiries I don’t take further: deleted within 6 months.
• Client records: for as long as you train with me, then deleted 2 years after your last session.
• Health information: deleted 2 years after your last session, or sooner if you ask.
• Records I need for tax: 6 years, as HMRC requires, without any health information attached.

Your rights

You can ask to see what I hold about you, correct it, or have it deleted, at any time, by emailing [hello@aureliabyrnept.com]. I will reply within one month. If you are unhappy with how I have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk.

Sharing

I do not sell or share your information with anyone, except the hosting and email providers named above, who process it on my behalf.

Cookies and analytics

This site sets a cookie only when you log in to a client account, to keep you logged in. It does not use tracking or advertising cookies. See the cookie notice.