Privacy Policy

Introduction

CJ Performance Healthcare (referred to as “we”, “us”, or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, and protect your information in compliance with the General Data Protection Regulation (GDPR) and other applicable laws. By using our website or services, you agree to the terms outlined below.

1. Data Collection

We collect the following types of personal data:

- For Inbound Leads: Name, email address, and phone number.

- For Clients: In addition to the above, we collect your home address, occupation, GP information, age, and medical history.

Additionally, we collect data via cookies, tracking technologies, and third-party analytics tools. This may include information about your device, IP address, and usage of our website.

2. Legal Basis for Processing

Under GDPR, we must have a valid legal basis to process your personal data. We rely on the following grounds:

- Consent: For marketing communications and promotional emails, provided you have opted in.

- Contractual Necessity: To fulfil our obligations when creating and managing your account as a client.

- Legitimate Interests: To improve our services and understand user engagement with our website.

3. Data Usage

The data we collect is used for the following purposes:

- Account Creation and Management: To set up, manage, and maintain your account with us.

- Marketing: With your consent, we may send you promotional emails, newsletters, and offers.

- Service Improvement: To analyse and enhance our services based on user interaction data.

4. Data Sharing

We do not share your data with any external third parties. However, we do use the following third-party tools for analytics and tracking:

- Google Analytics

- Google Tags

- Facebook Pixels

- HubSpot Tracking

- Taboola Tracking

These services may use cookies to collect anonymised data to understand how users interact with our website.

5. Data Storage and Security

We securely store your data in the cloud, on our operating systems, and within the Jane App and HubSpot platforms. To safeguard your information, we implement two-factor authentication (2FA) across all accounts, limiting access to authorised personnel only. Data is retained for as long as necessary to fulfil the purposes outlined in this policy or as required by law.

6. Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

- Right to Access: Request a copy of the data we hold about you.

- Right to Rectification: Correct any inaccuracies in your data.

- Right to Erasure: Request deletion of your data, provided it is no longer needed for lawful purposes.

- Right to Restriction: Restrict the processing of your data under certain conditions.

- Right to Data Portability: Receive your data in a structured, commonly used format and transfer it to another organisation.

- Right to Object: Object to the processing of your data based on legitimate interests.

To exercise these rights, please contact us using the information below. We will respond to requests within one month as required by GDPR.

7. Children’s Privacy

Our services are intended for individuals over the age of 18. We do not knowingly collect or store personal data from children.

8. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Significant updates will be communicated to you by email.

9. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: admin@cjperformancehealthcare.co.uk