Privacy Policy

BEGG CLINICAL EXERCISE  |  29 OCTOBER 2026

1. Introduction

BEGG Clinical Exercise is committed to protecting your privacy and handling your personal information securely, responsibly and confidentially. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, make an enquiry or access our clinical exercise services. We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

BEGG Clinical Exercise is an independent clinical exercise physiology service operated by Dr Brian Begg, PhD, Registered Clinical Exercise Physiologist.

Data Controller: Dr Brian Begg, trading as BEGG Clinical Exercise

Business correspondence address:

BEGG Clinical Exercise
4th Floor
14 Museum Place
City Centre
Cardiff
CF10 3BH
United Kingdom

This address is used for business correspondence and is not a clinical consultation or appointment location. Services are provided online and at agreed locations.

Website: www.beggclinicalexercise.co.uk
Email: info@beggclinicalexercise.co.uk

For questions about how your personal information is handled, please contact us using the email address above.

3. What Information We Collect

Depending on your interaction with BEGG Clinical Exercise, we may collect:

Website enquiries:

·         Your name and email address.

·         Contact information you choose to provide.

·         Information included in your enquiry.

Clinical assessments and exercise services:

·         Personal and contact details.

·         Relevant medical history, existing health conditions and medications.

·         Physical activity and exercise history.

·         Assessment findings, including relevant physiological and functional measurements.

·         Exercise goals, preferences and individual circumstances.

·         Personalised exercise programmes, progress records and consultation notes.

·         Relevant correspondence relating to your care and exercise support.

Administrative information:

·         Appointment and service records.

·         Invoices, payment records and transaction information.

We only collect information that is reasonably necessary to respond to enquiries, provide our services and meet our professional, administrative and legal responsibilities.

4. How We Use Your Information

·         Respond to enquiries and provide information about our services.

·         Arrange and conduct clinical exercise assessments.

·         Evaluate individual exercise needs, goals and relevant health considerations.

·         Develop and review personalised exercise programmes.

·         Deliver online coaching and supervised exercise sessions.

·         Monitor progress and maintain appropriate client records.

·         Communicate about appointments, programmes and ongoing support.

·         Manage invoices, payments and business administration.

·         Meet relevant legal, regulatory and professional obligations.

We do not sell your personal information or use your clinical records for unrelated marketing purposes.

5. Our Legal Basis for Processing Information

Under UK GDPR, we must have a lawful basis for collecting and processing personal information. Depending on the purpose, these may include:

·         Contractual necessity: where information is needed to arrange or provide services you have requested.

·         Legitimate interests: where processing is necessary to respond to enquiries, administer our business or maintain appropriate records, provided those interests do not override your rights.

·         Legal obligations: where we must retain or disclose certain information to comply with applicable law.

·         Consent: where consent is the appropriate lawful basis for a specific activity, such as optional marketing communications.

Health and medical information: Information relating to your health is special category personal data under UK GDPR and requires additional protection. We process this information only where an appropriate Article 9 condition applies, alongside a lawful basis under Article 6, and where necessary and proportionate to providing our services.

6. How Your Information Is Stored and Protected

Client records, including assessment documentation, medical information, exercise programmes and progress records, are stored electronically using Google Workspace, including Google Drive.

We take appropriate steps to protect personal information against unauthorised access, accidental loss, misuse or disclosure. These measures include:

·         Access restricted to authorised individuals.

·         Password-protected accounts and multi-factor authentication.

·         Appropriate management of document sharing and permissions.

·         Secure storage and transmission practices.

·         Regular review of access and retention arrangements.

Google Workspace provides cloud-based storage and associated data protection arrangements. Use of these services does not remove our responsibility for ensuring that personal information is handled appropriately. Website enquiries are submitted through Squarespace and may also be received through our business email system.

7. Sharing Your Information

Your personal information is treated confidentially. We do not routinely share your medical information with third parties. Where appropriate, information may be shared with another healthcare professional involved in your care, such as your GP or specialist, where there is a suitable legal basis and appropriate confidentiality safeguards.

Information may also be processed by trusted service providers supporting our website, communications, document storage, payments and business administration. These providers are only permitted to process information in accordance with their applicable contractual and legal obligations.

We may also disclose information where required by law or where necessary to address a serious concern involving safety or wellbeing, subject to applicable legal requirements.

8. International Data Transfers

Some technology providers used by BEGG Clinical Exercise, including Google and Squarespace, may process or store personal information outside the United Kingdom. Where international transfers take place, we will ensure that an appropriate lawful transfer mechanism or safeguard applies, such as an applicable adequacy regulation or recognised contractual safeguards. Further information about relevant safeguards can be requested using our contact email.

9. How Long We Keep Your Information

BEGG Clinical Exercise retains personal information only for as long as necessary to provide our services and meet relevant legal, professional and administrative responsibilities.

Clinical records, including medical histories, assessment findings, exercise programmes, consultation notes and progress records, are normally retained for 8 years following the conclusion of the client’s involvement with our services.

Records may be retained for longer where required by law, professional obligations, insurance requirements or where there is another justified reason, such as an ongoing complaint or legal matter. Website enquiries that do not result in a client relationship are normally retained for up to 12 months following the last correspondence. Financial and accounting records are retained in accordance with applicable HMRC requirements.

At the end of the relevant retention period, records are reviewed and securely deleted or anonymised unless there is a documented reason for retaining them longer.

10. Your Data Protection Rights

Under UK GDPR, you may have the right to:

·         Request access to the personal information we hold about you.

·         Ask us to correct inaccurate or incomplete information.

·         Request deletion of information in certain circumstances.

·         Request restrictions on how your information is processed.

·         Object to certain types of processing.

·         Request transfer of your information where the right to data portability applies.

·         Withdraw consent where consent is the lawful basis for processing.

These rights are subject to applicable legal conditions and exemptions. To exercise your rights, please contact info@beggclinicalexercise.co.uk. You also have the right to raise a concern with the Information Commissioner’s Office (ICO): www.ico.org.uk.

11. Website Cookies

Our website is hosted through Squarespace and may use cookies or similar technologies to support essential website functions and, where enabled, analytics or other features. Where legally required, we will provide information about these technologies and obtain appropriate consent before placing non-essential cookies. Further information will be available through our website’s cookie settings or cookie notice.

12. Contact Forms and Email Communication

When you submit an enquiry through our website, we use the information provided to respond to your message and discuss our services. Please avoid including detailed medical information in general website enquiry forms. Where sensitive health information is required, we will explain how it should be provided as part of the assessment process. Although we take reasonable steps to protect electronic communications, ordinary email may not always be appropriate for transmitting highly sensitive medical information.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes to our services, data-handling arrangements or legal requirements. The most recent version will be published on our website, together with the date of the latest update.

14. Contact Us

Dr Brian Begg
BEGG Clinical Exercise
Email: info@beggclinicalexercise.co.uk
Website: www.beggclinicalexercise.co.uk