Privacy Policy

Last updated: 26/07/26

Peak Fitness & Therapy (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal information we collect, why we collect it, and what we do with it when you use our website (peakft.com), sign up for our free email course, or enquire about our services.

Who we are

Peak Fitness & Therapy is a sports therapy practice operated by Mak/Mahmudur Rahman, based in South Woodford, London. For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), we are the “data controller” responsible for your personal information.

If you have any questions about this policy or the data we hold about you, contact us at info@peakft.com.

What information we collect

Depending on how you interact with us, we may collect:

  • Your name and email address — when you sign up for our free 4-day email course or get in touch.
  • Booking and enquiry details — if you book or ask about a consultation.
  • Website usage data — such as your IP address and how you use the site, collected automatically through cookies and similar technologies.
  • If you become a client: your name, address, contact details and date of birth,our medical history, current health conditions, medications, injuries and any relevant previous treatment. Session notes recording what we worked on, the treatment provided, and any changes you reported. Any recommendations or exercise programmes we gave you, including referrals to your GP or another practitioner. Records of your consent to treatment.

We only collect information you choose to give us, or that is collected automatically when you browse the site.

How we collect it

  • Directly from you — when you complete a form on our website, sign up through a Facebook or Instagram lead form, or contact us by email
  • Automatically — through cookies when you visit peakft.com

Why we use your information, and our lawful basis

Under UK GDPR we must have a lawful basis for using your data. We rely on:

  • Consent — to send you our free email course and occasional emails with tips and offers. You can withdraw your consent at any time by unsubscribing.
  • Legitimate interests — to respond to enquiries and to run and improve our website and services.
  • Contract — where you book a consultation, to provide the service you have requested.

Who we share it with

We do not sell your data. We share it only with the service providers that help us run the business, and they act on our instructions:

  • Meta (Facebook / Instagram) — where you sign up through a lead form on their platforms
  • Kit (formerly ConvertKit) — our email marketing provider, which stores your name and email and sends our emails
  • Square (squareup.com) — where you book or enquire about a consultation.
  • Limited circumstances in which we may share clinical information: Your GP or another health professional**, only with your agreement, except in an emergency or where there is a risk to your safety or someone else’s.

  • Our professional indemnity insurer – if a claim or complaint is made and relevant records are needed

Some of these providers are based outside the UK (for example, in the United States). Where your data is transferred internationally, we rely on appropriate safeguards, such as the UK’s International Data Transfer Agreement or equivalent protections, to keep it secure.

How long we keep it

We keep your information only for as long as we need it:

  • Email marketing data — until you unsubscribe or ask us to delete it
  • Enquiry and booking data — for as long as necessary to provide our services and meet any legal or record-keeping obligations

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Ask us to correct inaccurate data
  • Ask us to delete your data
  • Object to, or ask us to restrict, how we use it
  • Withdraw consent at any time (for example, by unsubscribing)
  • Request a copy of your data in a portable format

To exercise any of these rights, email us at info@peakft.com. You can unsubscribe from our emails at any time using the link at the bottom of every email.

Cookies

Our website uses cookies to help it function and to understand how visitors use it. We use Google Analytics to collect anonymous information about how people find and use our site, such as which pages they visit and how long they stay, so we can improve it. Google Analytics sets its own cookies and processes this data on our behalf; you can read more in Google’s privacy policy. You can control or disable cookies at any time through your browser settings.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date.