This policy explains what personal information MK Soft Tissue Therapy collects, why, and what you can do about it. It covers this website and the treatment records kept for clients.
Last updated: 4 August 2026
Who is responsible
MK Soft Tissue Therapy is a sole trader based in Milton Keynes and is the data controller for the information described here. For anything in this policy, contact Lisa at mk_stt@outlook.com or 07852 301412.
What is collected, and why
When you use the enquiry form
The form asks for your name, email address, an optional phone number, the treatment you are interested in, and a short description of your problem.
- What it is used for: replying to your enquiry and, if you go ahead, arranging an appointment.
- Lawful basis: taking steps at your request before entering into a contract.
- Where it goes: the message is emailed to the clinic. A copy is also stored in the website administration area as a backup, in case an email fails to arrive.
- How long it is kept: copies stored on the website are deleted automatically after 90 days. Emails are kept only as long as needed to deal with your enquiry.
Because people naturally describe their symptoms when enquiring, these messages often contain health information. That is treated as special category data — see below.
When you become a client
Before treatment you will complete a consultation form covering your medical history, medication, previous injuries and current symptoms. Notes are made at each appointment recording what was assessed, what was treated and what was advised.
- What it is used for: treating you safely and effectively, and tracking progress between sessions.
- Lawful basis: performing our contract, plus — for health information specifically — Article 9(2)(h) of the UK GDPR, which covers the provision of health treatment by a professional bound by a duty of confidentiality.
- How long it is kept: clinical records are retained for eight years after your last appointment, in line with professional insurance requirements. Records for anyone treated under 18 are kept until their 25th birthday.
When you visit the website
The website sets a small number of cookies. Nothing beyond what is strictly necessary is set until you choose — see the cookies section below.
Who your information is shared with
Your information is never sold, and never shared for marketing. It is shared only in these circumstances:
- Email providers — enquiry messages pass through the email service used to run the website contact form, and through the clinic email provider.
- Website hosting — the site host stores the website database, which includes the temporary enquiry copies described above.
- Other healthcare professionals — only with your explicit agreement, for example if you are referred to a physiotherapist or ask for a report for your GP.
- Where required by law — for example a court order, or where there is a serious risk to someone’s safety.
Cookies
A cookie is a small file stored by your browser. This site uses them in two categories.
- Strictly necessary — one cookie remembers your cookie choice so you are not asked repeatedly, and a security token protects the enquiry form from misuse. These do not track you and cannot be switched off.
- Analytics — anonymous statistics about which pages are visited. These are only set if you agree, and you can withdraw that agreement at any time.
Your choice is recorded so it can be demonstrated if ever questioned. That record holds the date, what you chose, a shortened version of your IP address and a random reference — not your name or email. To change your mind, use the Cookie settings link in the footer of any page.
Your rights
Under UK data protection law you can ask to:
- see a copy of the information held about you
- have anything inaccurate corrected
- have information deleted, where there is no legal or professional reason to keep it
- restrict or object to how it is used
- receive a copy in a portable format
- withdraw consent at any time, where consent was the basis for using it
To make a request, email mk_stt@outlook.com. You will get a response within one month. There is no charge.
Clinical records are one common exception to deletion — professional insurance requires they be kept for a set period even if you ask for them to be removed. If that applies, it will be explained to you.
Keeping information secure
The website is served over an encrypted connection. Administrative access is limited to Lisa and the website developer. Paper consultation forms are kept in a locked location, and digital records are held on password-protected devices.
Complaints
If you are unhappy with how your information has been handled, please raise it directly first — most things are resolved quickly. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
If this policy changes, the date at the top will be updated. Significant changes affecting existing clients will be communicated directly.
