Privacy Policy

Privacy Policy

Last updated: September 2026

Kin & Core respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Sarah Morgan, trading as Kin & Core, collects, uses, stores and protects personal information when you visit our website, contact us, make an enquiry or use our services.

1. Who we are

Kin & Core is a sole-trader business operated by Sarah Morgan.

Kin & Core
Physiotherapy | Pilates | Pelvic Health

For privacy enquiries, please contact us using the contact details provided on our website.

2. Information we may collect

Depending on how you interact with Kin & Core, we may collect:

Your name and contact details
Email address and telephone number
Booking and appointment information
Information you provide when making an enquiry
Information relating to your health, symptoms, medical history, physical activity and treatment needs where this is necessary to provide physiotherapy or related services
Emergency contact information where appropriate
Payment and transaction information
Information provided through feedback, questionnaires or outcome measures
Website usage information, such as IP address, browser type and pages visited
Information provided through social media or other communication platforms

You are not required to provide information simply to browse our website. However, certain information may be necessary for us to respond to an enquiry, arrange an appointment or provide our services.

3. How we use your information

We may use your information to:

Respond to enquiries
Arrange and manage appointments
Provide physiotherapy, Pilates and pelvic health services
Complete appropriate clinical assessments and records
Communicate with you about appointments and services
Process payments
Monitor and improve the quality of our services
Obtain feedback and measure outcomes
Meet our professional, legal and regulatory obligations
Maintain appropriate business and financial records
Protect the safety and wellbeing of clients
Manage our website and understand how it is used
Send marketing communications where you have provided appropriate consent

4. Health information

When you receive physiotherapy or related healthcare services, we may need to collect information about your health.

Health information is considered special-category personal data under UK data protection law and is subject to additional protection.

We will only collect and use health information where there is a lawful basis for doing so and where appropriate conditions under UK data protection legislation apply.

Your health information will only be accessed and used where reasonably necessary for the provision and management of your care, professional requirements, legal obligations or other legitimate purposes permitted by law.

5. Our legal basis for processing information

Depending on the circumstances, we may process your personal information because:

You have given consent
It is necessary to provide a service or take steps at your request before providing a service
We have a legal or regulatory obligation
It is necessary for legitimate interests, where these interests are not overridden by your rights
It is necessary for the provision and management of healthcare services

Where consent is relied upon, you have the right to withdraw your consent at any time.

6. Who we may share information with

We will not sell or rent your personal information.

Where necessary and appropriate, information may be shared with:

Healthcare professionals involved in your care, where appropriate
Professional, regulatory or legal bodies where required
Payment providers
Booking, practice-management or other service providers used to operate the business
IT, website hosting or email providers
Accountants, insurers or professional advisers where necessary
Emergency services or other appropriate organisations where there is a serious risk to your health or safety or where disclosure is otherwise required or permitted by law

We only share information where there is an appropriate lawful basis to do so.

7. How we protect your information

We take reasonable and appropriate measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

Access to information is restricted to those who need it for legitimate business, professional or legal purposes.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

8. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet professional, legal, regulatory, accounting and insurance requirements.

Clinical records may need to be retained for longer than general enquiry or marketing information.

When information is no longer required, it will be securely deleted or otherwise disposed of where appropriate.

9. Your rights

Under UK data protection law, you may have the right to:

Request access to the personal information we hold about you
Ask us to correct inaccurate or incomplete information
Request deletion of your information in certain circumstances
Request restriction of processing in certain circumstances
Object to certain processing
Request transfer of certain information to another organisation
Withdraw consent where processing is based on consent

Some rights are subject to legal or regulatory exemptions.

To exercise your rights, please contact Kin & Core using the contact details provided on our website.

10. Marketing

We will only send you marketing communications where we have a lawful basis to do so.

You can unsubscribe from marketing communications at any time by contacting us or using the unsubscribe option provided in the communication.

11. Third-party services and links

Our website may contain links to third-party websites, booking platforms, social media platforms or other services.

Those organisations have their own privacy policies and terms. Kin & Core is not responsible for the privacy practices of third-party websites or services.

12. Cookies

Our website may use cookies and similar technologies. Please see our Cookie Policy for further information.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology or legal requirements.

The latest version will always be published on this website.

14. Contact

If you have any questions about this Privacy Policy or how your personal information is handled, please contact:

Sarah Morgan
Kin & Core
Physiotherapy | Pilates | Pelvic Health

[Insert business email address]

If you are unhappy with how we have handled your personal information, you also have the right to raise a concern with the Information Commissioner’s Office (ICO).

You can find information about your data protection rights on the ICO website.