Privacy Policy

Effective Date: [Insert Date]

Recovery852 ("we," "our," "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access our website and online rehabilitation services.

1. Information We Collect

We may collect and process the following categories of personal data:

• Identity data: name, date of birth, gender.
• Contact data: email address, phone number, postal address.
• Health data: medical history, rehabilitation progress, treatment notes (only with explicit consent).
• Technical data: IP address, browser type, device identifiers, cookies, and usage logs.
• Transactional data: payment details, billing information.

2. Legal Basis for Processing

We process personal data under the following lawful bases:

• Consent: when you voluntarily provide health information.
• Contractual necessity: to deliver services you request.
• Legal obligation: to comply with applicable laws and regulations.
• Legitimate interests: to improve services, ensure security, and maintain communication.

3. How We Use Your Information

Your data may be used to:

• Provide and manage rehabilitation services.
• Communicate updates, reminders, and support.
• Process payments and maintain records.
• Monitor website performance and enhance user experience.
• Comply with legal and regulatory requirements.

4. Data Sharing

We may share your personal data with:

• Authorized staff and healthcare professionals.
• Payment processors and IT service providers.
• Regulators or law enforcement when legally required.

We do not sell or trade your personal data.

5. International Transfers

As Recovery852 operates in Hong Kong, your data may be transferred outside the UK/EU. Where applicable, we ensure adequate safeguards consistent with UK GDPR, such as Standard Contractual Clauses.

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined, subject to legal and medical record-keeping obligations. Once no longer required, data will be securely deleted or anonymized.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data.
• Request correction of inaccurate information.
• Request erasure ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.

8. Security Measures

We implement appropriate technical and organizational safeguards, including encryption, secure servers, and restricted access, to protect your data against unauthorized access, alteration, or disclosure.

9. Cookies and Tracking

Our website uses cookies and analytics tools to improve functionality and monitor performance. You may disable cookies in your browser settings. A separate Cookie Policy is available for more details.

10. Contact Us

For questions or to exercise your rights, please contact our Data Protection Officer (DPO):

11. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page and will take effect immediately upon publication.

Last updated: [Insert Date]