Privacy Policy for Jenny Allison | Beyond Limits

Effective date: 03/11/2025

1. Who we are

We are Jenny Allison | Beyond Limits (“we”, “us”, “our”). We provide online and in-person services, support programmes, and educational content designed to help women over 50 rebuild trust in their bodies, reduce pain, and move more freely.

Jenny Allison is a UK-registered physiotherapist (HCPC: PH57261) and operates within the standards of the Health & Care Professions Council (HCPC) and the Chartered Society of Physiotherapy (CSP).

2. What personal data we collect

Depending on what you sign up for or engage with, we may collect:

Your name

Email address

Phone number (if provided)

Age or birth year (optional)

Payment details (if making a purchase)

Information about your health or wellbeing — including pain, movement, medical history, or recovery goals

IP address, browser type, and cookie data from our website

Any messages, forms, or communications you share with us

3. Special Category Data (Health Information)

If you take part in any programme, class, or 1:1 work that involves health-related support, we may process personal data concerning your health (such as symptoms, pain levels, or history). As a registered healthcare professional, this is processed lawfully under:

UK GDPR Article 9(2)(h): for the provision of health or social care by a regulated professional bound by confidentiality.

All such data is stored securely and only accessed as required to support your care or participation.

4. Why we collect your data
We collect personal data:

To deliver the resource, service, or programme you’ve signed up for

To tailor our guidance to your needs, where relevant

To send you updates, reflections, or useful content if you’ve opted in

To improve our site, programmes, and services

To meet legal or regulatory obligations as a healthcare provider

5. Lawful Basis for Processing
We process your data on one or more of the following bases:

Consent — where you’ve opted in to receive marketing, emails, or resources

Contract — where you’ve signed up for a paid service

Legal obligation — where we’re required to keep clinical or financial records

Legitimate interest — for general enquiries, service improvement, or tracking participation

Health care provision — under Article 9(2)(h) for physiotherapy and recovery-related support

6. How Long We Keep Your Data

For clients: we keep your clinical and contact information securely for a minimum of 8 years, in line with HCPC and CSP standards.

For subscribers: we keep your details for as long as you engage with our content. You can unsubscribe at any time.

For non-clinical interactions (e.g., freebies, emails), data may be kept for up to 2 years unless requested otherwise.

7. Who we share your data with
We will never sell your data. We only share it with:

Trusted service providers (e.g., payment processors, email platforms) who help us deliver services — all are GDPR compliant

Professional advisors (accountants, legal, IT) under confidentiality agreements

Healthcare regulators or authorities where legally required

8. International transfers
Some of our tools (like email systems or community platforms) may store data outside the UK. Where this happens, we ensure that proper data safeguards are in place (e.g., UK GDPR-compliant agreements or adequacy decisions).

9. Your rights
Under the Information Commissioner's Office (ICO) guidance you have rights including:

The right to access the personal data we hold about you.

The right to request correction of inaccurate data.

The right to request deletion of your data (in certain circumstances).

The right to withdraw consent (for example for marketing) at any time.

The right to object to certain processing (for example direct marketing).

The right request a copy of any data we hold

The right to lodge a complaint with the ICO if you believe we’re not handling your data properly. Information Commissioner's Office+1

10. Cookies
We use cookies and similar tools to understand how visitors use our website. This helps us improve content and functionality. Essential cookies run automatically; non-essential cookies require your consent.

You can change your cookie preferences in your browser settings.

11. Data Security
We take appropriate measures to protect your data — including secure storage, limited access, and encryption where needed. However, no method is 100% secure, and we cannot guarantee absolute protection.

12. Changes to this policy
We may update this policy occasionally. The latest version will always be published on this page.

11. Contact details
If you have any questions, requests or concerns about how we handle your personal data, please contact:
Jenny Allison
[email protected]

You can also contact the ICO for general guidance: https://ico.org.uk