BRIGHTON BIOMECHANICS
PRIVACY NOTICE
Effective from: 23/08/2026
Version: 1.0
This Privacy Notice explains how Brighton Biomechanics collects, uses, stores and protects personal information.
Brighton Biomechanics is operated by Petros Sklias, trading as Brighton Biomechanics, who is the data controller for personal information processed by the business.
Business address:
The Old Bowls Pavilion
Preston Park
Brighton & Hove
BN1 6HN
Email: contact@btn-bmc.co.uk
Website: https://www.btn-bmc.co.uk/
1. Information We Collect
Depending on your relationship with Brighton Biomechanics, we may collect:
Identity and contact information
This may include your:
name;
date of birth;
email address;
telephone number;
address;
emergency contact details; and
parent or guardian information where the client is under 18.
Training information
This may include:
movement assessments;
training programmes;
exercise history;
session notes;
observations concerning movement and performance;
attendance and booking information; and
information relating to your training progress.
Health information
To provide training safely and appropriately, we may collect information that you voluntarily provide concerning:
injuries;
pain or physical limitations;
relevant medical conditions;
medical history;
medication where relevant to exercise; and
other health information relevant to your suitability for training.
Health information is classed as special-category personal data under UK data protection law and receives additional protection.
We only ask for health information that we reasonably consider relevant to providing your training safely and effectively.
Photographs and video
We may take photographs or video for:
movement and posture assessment;
gait analysis;
exercise technique;
comparison of progress over time; and
where separately authorised, promotional or educational use.
Public or promotional use is subject to separate consent and is not a condition of receiving training.
Financial information
We may hold information concerning:
invoices;
payments;
purchases;
refunds; and
billing information.
Payments are processed through Stripe. Brighton Biomechanics does not ordinarily receive or store your full debit or credit card details.
Accounting and invoice records are maintained using Xero.
Communications
We may retain correspondence with you through:
Proton Mail;
WhatsApp;
SMS; and
other communications reasonably necessary to provide or administer your training.
2. How We Collect Your Information
Most personal information is provided directly by you when you:
contact Brighton Biomechanics;
complete a PAR-Q or other client form;
purchase or book training;
participate in an assessment or training session;
communicate with your practitioner;
provide photographs, video or health information; or
provide consent for a particular use of your information.
For clients under 18, some information may be provided by a parent or legal guardian.
Information may also be generated during your training, for example through practitioner session notes, assessments, photographs or videos.
3. Why We Use Your Information
We process personal information where reasonably necessary to:
respond to enquiries;
establish and administer our relationship with you;
arrange appointments;
provide personal training and movement coaching;
assess suitability for exercise;
modify training according to relevant health information;
monitor and record training progress;
maintain appropriate professional records;
process payments and maintain accounts;
communicate appointment or service information;
manage cancellations, complaints or disputes;
comply with legal, tax, insurance and regulatory obligations;
establish, exercise or defend legal claims;
protect clients, practitioners and the business;
comply with applicable Functional Patterns practitioner requirements; and
send marketing communications where permitted by law.
We do not sell client personal information.
4. Our Lawful Bases
Under the UK GDPR, Brighton Biomechanics relies on different lawful bases depending on why information is being processed.
These include:
Performance of a contract
We process information where it is necessary to arrange, administer and provide the training services you have requested.
This includes information such as contact details, bookings, training records and payment information.
Legal obligation
We process and retain certain information where required to comply with legal obligations, including tax and accounting requirements.
Legitimate interests
We may process information where reasonably necessary for legitimate business purposes, provided that these interests do not override your rights and freedoms.
These interests include:
maintaining appropriate professional records;
administering and protecting the business;
maintaining service quality;
communicating with clients;
managing complaints and disputes;
complying with relevant practitioner requirements; and
establishing, exercising or defending legal claims.
Consent
Where appropriate, we rely on consent for optional uses of information, including certain uses of health information and identifiable photographs or video.
Where we rely on your consent, you may withdraw it at any time.
5. Health Information
Information concerning your physical or mental health is special-category personal data.
Where you voluntarily provide health information so that we can assess your suitability for exercise, adapt your training and provide services safely, Brighton Biomechanics will ordinarily rely on:
an appropriate lawful basis under Article 6 UK GDPR; and
your explicit consent under Article 9 UK GDPR for processing special-category health information.
Health-data consent is obtained separately from general acceptance of our Client Terms.
You may withdraw your consent where applicable by contacting us.
Withdrawal of consent will not affect processing that was lawful before consent was withdrawn. If we do not have sufficient relevant information to provide training safely, however, we may be unable to continue providing some or all training services.
Information may also be retained where permitted or required by law, including where reasonably necessary for the establishment, exercise or defence of legal claims.
6. Functional Patterns
Brighton Biomechanics practitioners use the Functional Patterns methodology.
Where required under applicable Functional Patterns practitioner policies, certain client information is entered into the Functional Patterns application operated by Functional Patterns LLC.
This may include:
your name;
your email address; and
a digital copy of an accepted official identity document, such as a passport or driving licence, where required by Functional Patterns for client verification or its applicable agreements.
Brighton Biomechanics will not retain an additional copy of your identity document for its own purposes unless there is a specific legitimate reason to do so.
Information entered into the Functional Patterns platform is also subject to Functional Patterns' own privacy arrangements and terms.
Functional Patterns LLC is independent from Brighton Biomechanics.
7. PAR-Q and Client Forms
Brighton Biomechanics uses Jotform's European service (eu.jotform.com) to collect and store PAR-Q forms and related client information.
These forms may contain health information and therefore receive additional protection as special-category personal data.
Access is restricted to Brighton Biomechanics and authorised practitioners where access is necessary to provide your training.
8. Practitioners Working With Brighton Biomechanics
Where another Brighton Biomechanics practitioner is assigned to train you, they may be given access to information reasonably necessary to provide your sessions safely and effectively.
This may include relevant:
contact details;
booking information;
health information;
PAR-Q information;
assessment information;
session notes; and
training records.
Practitioners only receive information relating to clients they are authorised to work with and are required to maintain its confidentiality and security.
9. Service Providers and Other Recipients
Brighton Biomechanics uses third-party services to operate the business.
These currently include:
Jotform — client forms and PAR-Q records;
Proton Mail — email;
Proton Calendar — appointments and scheduling;
Stripe — payment processing;
Xero — accounting and invoicing;
Google Photos — storage of training photographs and video;
WhatsApp — client communications;
telecommunications providers for SMS; and
Functional Patterns LLC — where information must be entered into the Functional Patterns platform.
We may also disclose information where reasonably necessary to:
an accountant or bookkeeper;
insurers;
solicitors or other professional advisers;
regulators;
courts;
law-enforcement bodies; or
another person where disclosure is required by law.
We require persons working on behalf of Brighton Biomechanics to handle personal information appropriately.
10. International Data Transfers
Some of the technology providers used by Brighton Biomechanics operate internationally.
As a result, some personal information may be processed or made accessible outside the United Kingdom.
Where UK data protection law requires additional safeguards for an international transfer, we rely on appropriate mechanisms provided by the relevant service provider, such as:
UK adequacy regulations;
recognised data-transfer frameworks; or
approved contractual safeguards.
Where possible and appropriate, Brighton Biomechanics uses European or other suitably protected data-storage environments.
11. How Long We Keep Your Information
We do not retain personal information indefinitely.
Our normal retention periods are:
Adult client records
Core client records, including:
signed agreements;
health declarations;
PAR-Q information;
relevant training and assessment notes;
session records; and
information necessary to understand the professional relationship
will normally be retained for six years after your final service with Brighton Biomechanics.
This is intended to allow Brighton Biomechanics to maintain appropriate professional records and respond to legal, insurance or contractual matters that may arise after training ends.
Clients under 18
Where a client was under 18 during training, certain core records may need to be retained for longer because applicable legal limitation periods can continue after the client reaches adulthood.
Such records will normally be retained until the later of:
the client's 24th birthday; or
six years after their final service,
unless a longer or shorter period is reasonably required by law, our insurer, safeguarding considerations or a specific legal matter.
Private coaching photographs and video
Photographs and videos used solely for movement assessment, technique review or progress comparison will normally be deleted 12 months after your final training session.
They may be deleted sooner where they are no longer required.
A particular photograph or video may be retained for longer where it forms part of a relevant incident, complaint, safeguarding matter or legal claim.
Promotional photographs and video
Material used publicly with your consent may be retained while:
your consent remains valid;
the material remains relevant; and
Brighton Biomechanics continues to have a legitimate purpose for using it.
Consent may be withdrawn for future use.
Withdrawal cannot always remove copies of material that have already been lawfully published, downloaded, reproduced or distributed by others.
Accounting records
Invoices, transaction records and other accounting information will normally be retained for the period required by HMRC and other applicable legal requirements.
In practice, Brighton Biomechanics will ordinarily retain relevant accounting records for approximately six years.
Enquiries that do not become clients
Information relating to an enquiry that does not result in training will ordinarily be deleted within 12 months, unless there is a legitimate reason to retain it longer.
Complaints, incidents and legal claims
Records connected with an accident, complaint, safeguarding matter, dispute or legal claim may be retained for longer where reasonably necessary to investigate the matter or establish, exercise or defend legal rights.
12. Photography and Video
Training photographs and videos are used only for the purposes explained when they are collected.
Private assessment footage is not automatically authorised for public use.
Brighton Biomechanics will obtain separate permission before using identifiable client photographs or video for:
social media;
the Brighton Biomechanics website;
advertising;
promotional material;
testimonials; or
other public-facing content.
Refusing public-media consent will not affect your ability to train with Brighton Biomechanics.
13. Marketing and Newsletter Emails
Brighton Biomechanics may send an occasional newsletter or information about its own training services where:
you have specifically asked or consented to receive such communications; or
sending them is otherwise permitted under applicable UK electronic-marketing rules.
Service communications—including appointment information, changes of venue, practitioner absence or information necessary to provide your training—are not treated as marketing merely because they are sent by email or message.
You can opt out of marketing communications at any time by contacting:
or by using any unsubscribe method contained in the communication.
Opting out of marketing does not prevent us from sending information that is necessary to administer your training.
14. Children and Young People
Brighton Biomechanics provides training to clients under the age of 18.
We take additional care when processing children's personal information and only collect information that is reasonably necessary for the services being provided.
Where appropriate:
a parent or legal guardian will be involved in the client's registration;
parental or guardian contact information may be retained;
relevant consents will be obtained with parental or guardian involvement; and
privacy information will be explained to the young person in a way appropriate to their age and understanding.
Information concerning children will not be used for public promotional purposes without the appropriate separate consent.
15. CCTV at the Training Premises
The premises at The Old Bowls Pavilion operate CCTV.
The CCTV system is operated independently by FitnessHub Plus and is not controlled by Brighton Biomechanics.
Brighton Biomechanics does not routinely receive, store or control CCTV footage from the premises.
Any CCTV processing undertaken by FitnessHub Plus is subject to its own data-protection responsibilities.
16. Security
Brighton Biomechanics takes reasonable technical and organisational measures to protect personal information against:
unauthorised access;
accidental loss;
misuse;
alteration; and
unauthorised disclosure.
Access to client information is restricted to Brighton Biomechanics and authorised practitioners or service providers who reasonably require access.
We use password-protected digital services and privacy-focused or secured platforms where reasonably practicable.
No method of electronic storage or communication can be guaranteed to be completely secure.
17. Your Data Protection Rights
Depending on the circumstances, UK data-protection law may give you the right to:
request access to personal information held about you;
ask us to correct inaccurate or incomplete information;
request deletion of personal information;
request restriction of processing;
object to certain uses of your information;
receive certain information in a portable format;
withdraw consent where consent is the basis for processing; and
object to direct marketing at any time.
These rights are not absolute in every circumstance.
For example, we may need to retain certain accounting records despite a deletion request because we are legally required to retain them.
We may also retain information where necessary for the establishment, exercise or defence of legal claims.
To exercise your rights, contact:
We may need to verify your identity before acting on a request.
18. Automated Decision-Making
Brighton Biomechanics does not use personal information to make solely automated decisions that produce legal or similarly significant effects on clients.
19. Complaints
If you have a concern about how Brighton Biomechanics has handled your personal information, please contact us first at:
We will aim to investigate and resolve the matter appropriately.
You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's data-protection regulator.
20. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect:
changes to our services;
changes to the technology providers we use;
legal or regulatory changes; or
changes to Functional Patterns practitioner requirements.
The current version will identify its effective date.
Where we intend to use existing personal information for a materially different purpose, we will provide appropriate information before beginning that new processing.