Privacy Policy

Last updated: 23 October 2026

Lincoln Performance and Recovery Clinic respects your privacy and takes the protection of your personal information seriously.

This policy explains how we collect, use, store and share personal information when you visit our website, contact us, purchase products, hire equipment or use our services.

1. Who we are

Lincoln Performance and Recovery Clinic is the trading name of “Lincolnshire Flotation & Cryotherapy LLP”  , the data controller responsible for the personal information covered by this policy.

Trading name: Lincolnshire Flotation & Cryotherapy LLP
Legal business or proprietor’s name: Lincolnshire Flotation & Cryotherapy LLP
Company number, if applicable: OC431299
Business correspondence address: Unit 1, Dixon Court, Dixon Street, Lincoln LN6 7DA
Privacy contact email: paula@s2c8.co.uk
Website: www.lincolncryolab.co.uk

For privacy enquiries or requests concerning your information, please use the contact details above.

2. Information we collect

Depending on your relationship with us, we may collect:

  • Your name, address, telephone number and email address.
  • Appointment details, attendance history and session records.
  • Information provided in enquiries, feedback or complaints.
  • Health-screening, suitability and consent information.
  • Relevant information you share during sessions.
  • Emergency-contact details where appropriate.
  • Product purchases, equipment orders, hire agreements and delivery details.
  • Payment, refund and transaction records.
  • Marketing preferences and consent records.
  • Technical information such as your IP address, browser, device and website activity.
  • Information collected through cookies and similar technologies.

Payment providers process card payments. We do not normally receive or store complete payment-card details.

3. How we collect information

We collect information when you:

  • Contact us by telephone, email, social media or through our website.
  • Make a booking or purchase.
  • Complete screening, consent or equipment-hire forms.
  • Attend a session or communicate with our team.
  • Arrange equipment delivery, setup, servicing or support.
  • Subscribe to marketing communications.

Our website also collects certain technical information automatically. Optional cookies are handled as explained in section 11.

If someone books on your behalf or provides emergency-contact information, we may receive your details from them. We use those details only for the relevant booking, service or emergency purpose.

4. Why we use information and our lawful bases

We use personal information for the following purposes.

Enquiries, bookings, purchases and equipment hire

We use contact, booking, order and delivery details to respond to requests, arrange appointments, supply products or equipment, provide support and manage payments or refunds.

Our lawful basis is taking steps at your request before entering a contract, or performing our contract with you.

Service screening and delivery

We use relevant information to assess suitability, explain services, record consent and manage sessions. Our lawful basis is performance of our contract where the processing is necessary to provide the requested service. Additional protection for health information is explained in section 5.

Business administration and security

We use relevant records to manage complaints, protect our systems, prevent misuse, administer the business and establish or defend legal claims.

Our lawful basis is our legitimate interests in operating a secure, accountable business and resolving disputes, provided those interests do not override your rights.

Legal requirements

We retain or disclose information where necessary to comply with applicable legal obligations, including relevant accounting and tax requirements.

Our lawful basis is legal obligation.

Marketing

We use contact details and preferences to send marketing where you have consented or where the rules for marketing similar services to existing customers permit it. Depending on the circumstances, our lawful basis is consent or legitimate interests, alongside the applicable electronic-marketing rules.

Optional website technology

Where consent is required for optional cookies or similar technology, we rely on your consent.

5. Health information

Health information is special-category personal data and requires additional protection.

We request relevant information to identify potential contraindications, assess suitability and help manage sessions safely. Please keep us informed of relevant changes before attending.

For routine health screening and session delivery, we seek your explicit consent to process health information. This is separate from your consent to take part in a session.

You can withdraw your data-processing consent by contacting us. Withdrawal does not affect processing that was lawful before you withdrew it. If we cannot assess suitability without the information, we may be unable to provide or continue the service.

Where necessary to establish, exercise or defend legal claims, we may retain and use relevant health records under the separate legal-claims condition.

We do not sell health information or use it for unrelated marketing.

6. Marketing preferences

You can choose whether to receive news, offers and information about our services and products.

Where we rely on the existing-customer marketing exception, we will meet its requirements, including offering an opt-out when collecting your details and in each subsequent marketing message.

You can object to direct marketing at any time. Use the unsubscribe option in a message or contact us using the details in section 1.

We may keep a minimal suppression record so that we can respect your request not to receive marketing.

Opting out does not prevent essential messages about appointments, orders, payments, hire agreements or safety matters.

7. Who we share information with

We share information only where necessary for the relevant purpose. Recipients may include:

  • Booking and customer-management providers.
  • Payment processors.
  • Website-hosting, email, document-storage and IT-support providers.
  • Delivery, equipment-service or installation providers.
  • Accountants, insurers and legal advisers.
  • Public authorities, regulators, courts or law-enforcement bodies where disclosure is legally required or otherwise lawful.

We limit information shared to what is needed. For example, a delivery provider would normally need contact and delivery details, rather than health-screening records.

Where providers process information on our behalf, we require appropriate contractual protections.

We do not sell or rent personal information. Information is not automatically shared with another clinic or a community organisation simply because it has a relationship with us.

8. International transfers

Some providers may store or access personal information outside the United Kingdom.

Where a restricted international transfer takes place, we use an applicable lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, together with any assessments required.

Contact us if you would like information about relevant transfers and the safeguards used, including how to obtain a copy of applicable safeguards.

9. How long we keep information

We retain information for the period necessary for its purpose, taking account of legal requirements, insurance conditions and potential claims.

Subject to our confirmed retention arrangements, our normal periods are:

  • General enquiries: up to 24 months after the last meaningful contact.
  • Booking, purchase, payment and hire records: normally six years after the relevant transaction or the end of the agreement, subject to applicable accounting requirements.
  • Adult health-screening, consent and session records: normally six years after the last session, unless a longer period is justified.
  • Children’s records: assessed separately, taking account of age, safeguarding needs, insurer requirements and applicable claim periods.
  • Marketing records: until consent is withdrawn, you object, or a review shows that the information should no longer be used.
  • Marketing suppression records: retained as needed to honour your opt-out.
  • Website security logs: normally no longer than 12 months, unless needed to investigate an incident.
  • Cookie information: retained for the periods stated in our cookie information.

We may retain relevant records for longer where a complaint, insurance matter, safeguarding concern or legal claim is ongoing or reasonably anticipated.

Information no longer required is securely deleted, anonymised or destroyed.

10. Keeping information secure

We use appropriate technical and organisational measures to protect personal information against