Privacy Policy

Last updated: 1 October 2026

Who I am

Elite Golf Therapy is run by James Templeton, an HCPC-registered physiotherapist, as a sole trader based in Bagshot, Surrey. I am the data controller for the personal information described in this policy.

If you have any questions about your information, email james@elitegolftherapy.co.uk.

What information I collect

What I hold depends on how you deal with me.

Website visitors: the pages you view, your device and browser type, your approximate location and how you arrived at the site. This is collected through cookies, but only if you accept them (see below).

Enquiries: your name, email, phone number and anything you tell me by email, WhatsApp, text, phone or through a form.

Bookings: your name, email, phone number, postcode and golf handicap.

Clients: contact details, date of birth, golf details (such as handicap and equipment), medical history, symptoms, assessment findings, treatment notes and exercise programmes.

Payments: your booking and payment details. Card payments are handled by Stripe, and I never see or store your full card number.

Health information is "special category" data under UK data protection law. I treat it with extra care, as described below.

I don't provide treatment to anyone under 18.

Why I use it and the legal basis

Assessing and treating you, and keeping clinical records: to provide the service you booked (contract). For health information, the basis is the provision of health care by a registered health professional bound by confidentiality (UK GDPR Article 9(2)(h)).

Taking bookings and payments: contract.

Replying to enquiries and following up: taking steps at your request before you book, and my legitimate interest in following up.

Keeping financial and clinical records for the required time: legal obligation and professional requirements (HCPC and CSP).

Occasional emails about services or events: your consent. You can unsubscribe at any time.

Website analytics cookies: your consent through the cookie banner.

Using photos, videos or testimonials in marketing: your separate written consent.

As an HCPC registrant, I keep your information confidential. I only share it without your permission where the law requires it or where there is a serious risk to you or others.

Who I share it with

I never sell your information. I use a small number of trusted services to run the business, and they only handle your data on my instructions.

Google Workspace (Drive, Docs, Forms, Gmail): storing clinical notes, health questionnaires and email, under a data processing agreement.

Calendly: online booking.

Stripe: card payments.

WhatsApp, text and phone: arranging appointments and general contact.

Squarespace: hosting the website and its forms.

Google Analytics: website statistics, only if you accept cookies.

AI tools: I sometimes use AI tools to help design exercise programmes. I only share general details such as age range, handicap, equipment and injury type, never your name or contact details. These tools don't use the information for training.

Some of these companies may process data outside the UK. Where they do, they use legal safeguards approved under UK law.

I will only share your clinical information with your GP, consultant or another health professional with your permission. The exceptions are where the law requires it or where there is a serious risk to you or someone else.

Cookies and analytics

The website uses cookies. Essential cookies keep the site working and can't be switched off. With your consent, I also use Google Analytics to see how many people visit and which pages they use.

Google Analytics only runs if you choose "Accept all" in the cookie banner. You can decline, or change your choice at any time, through the cookie settings link at the bottom of the site or by clearing cookies in your browser.

I don't use cookies to collect health information.

Photos, videos and testimonials

I may film your movement or swing during an assessment. I record the findings in your clinical notes, and the video is deleted from my device shortly afterwards. Assessment videos are never shared.

I will only use your photo, video, name or testimonial in marketing with your separate written consent. You can withdraw that consent at any time. I'll then stop using it in new material and remove it from my website and social media where I can.

How I protect it and how long I keep it

Clinical records are stored electronically in a secure Google Workspace account protected by two-step verification. Only I can access them. I don't keep paper notes.

Clinical records: 8 years after your last appointment, in line with CSP guidance for England.

Payment and financial records: at least 6 years, as HMRC requires.

Enquiries that don't lead to a booking: up to 2 years.

Marketing emails: until you unsubscribe.

Website analytics: up to 14 months.

After these periods, I delete your information securely.

Your rights

You have the right to ask for a copy of the information I hold about you, ask me to correct anything that's wrong, and ask me to delete your information (unless I must keep it by law or professional rules, such as clinical records). You can also object to or restrict how I use your information, withdraw your consent at any time where I rely on it, and ask for your information in a format you can take elsewhere.

To use any of these rights, email james@elitegolftherapy.co.uk. I'll reply within one month.

If you're unhappy with how I've handled your information, please tell me first. You also have the right to complain to the Information Commission (formerly the Information Commissioner's Office) at ico.org.uk/make-a-complaint or on 0303 123 1113.