Privacy Policy
ENDURA
Effective date:
May 2026
ENDURA is committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
ENDURA is a health and wellness clinic based in the United Kingdom.
For the purposes of data protection law, ENDURA is the data controller of your personal data. This means we are responsible for deciding how your information is used and protected.
If you have any questions, you can contact us via email or phone using the details provided on our website.
2. What information we collect
We may collect and process the following personal data:
-
Identity data: name
-
Contact data: email address, phone number
-
Booking data: appointment details and service history
-
Health data: relevant medical or physical information required to deliver safe and effective treatments
-
Communication data: messages, enquiries, or form submissions
Health data is classified as special category data and is handled with additional care and confidentiality.
3. How we collect your data
We collect your data when you:
-
Book an appointment
-
Complete a consultation or health form
-
Contact us via our website, email, or phone
-
Interact with our booking systems
4. How we use your information
We use your personal data to:
-
Manage bookings and appointments
-
Deliver safe, effective, and appropriate treatments
-
Communicate with you regarding your sessions
-
Maintain accurate client records
-
Comply with legal and insurance obligations
5. Legal basis for processing
We rely on the following lawful bases:
-
Consent – for collecting and using health-related information
-
Legitimate interests – for managing bookings, running the clinic, and providing services
-
Legal obligations – where required for record keeping or compliance
You have the right to withdraw your consent at any time.
6. How your data is stored and protected
Your personal data is stored securely using trusted systems and is only accessible where necessary.
We take appropriate technical and organisational measures to protect your data from unauthorised access, loss, misuse, or disclosure.
7. Data retention
We retain your personal data only for as long as necessary, including:
-
To provide ongoing services
-
To meet legal, insurance, and professional requirements
Health records may be retained for a period in line with industry standards and insurance policies.
8. Sharing your information
We do not sell your personal data.
Your data may be shared with trusted third parties where necessary to operate our business, including:
-
Booking and scheduling systems
-
Payment providers
All third parties are required to handle your data securely and in accordance with data protection laws.
9. International data transfers
Some of the systems we use may store data outside the UK. Where this occurs, we ensure appropriate safeguards are in place to protect your data.
10. Your rights
Under UK data protection law, you have the right to:
-
Access your personal data
-
Request correction of inaccurate data
-
Request erasure of your data (where applicable)
-
Restrict or object to processing
-
Withdraw consent at any time
To exercise your rights, please contact us.
You also have the right to lodge a complaint with the
Information Commissioner's Office (ICO).
11. Cookies
Our website may use cookies to improve your browsing experience and analyse website traffic.
You can control or disable cookies through your browser settings.
12. Third-party links
Our website may contain links to external websites. We are not responsible for the privacy practices of these sites.
13. Updates to this policy
We may update this policy from time to time. The latest version will always be available on our website.