PRIVACY POLICY

WHO WE ARE

Modern Man Clinic is a company registered in England and Wales.

• Company: Harvey Lonsdale Coaching Ltd
• Company number: TBC
• Registered postcode: CH64 2TG
• Data Protection Officer (DPO): harveylonsdalecoaching@gmail.com

WHAT INFORMATION WE COLLECT

We may collect and process the following categories of personal data:

• Identity Data: Name, date of birth, ID documents.
• Contact Data: Address, email, phone number.
• Health Data (special category): Medical history, bloodwork results, treatment notes, lifestyle details such as exercise, diet, and use of performance-enhancing substances.
• Payment Data: Billing details. We do not store full card details — these are processed securely by third-party payment providers.
• Technical Data: IP address, browser type, cookies, usage statistics on our website.

HOW WE COLLECT YOUR DATA

• Directly from you through forms, consultations, medical history, and coaching sessions.
• Automatically via our website through cookies and analytics.
• From third parties such as labs, 3rd party bloodwork providers, fitness coaches, and payment providers.

HOW WE USE YOUR DATA

We process your personal data for the following purposes:

• To provide consultations, treatment, and coaching.
• To advise on Testosterone Replacement Therapy (TRT), bodybuilding programs, or performance-enhancing drug protocols.
• To comply with legal and regulatory obligations such as record keeping.
• For secure billing and payment.
• For marketing communications, only with your consent.
• For internal business purposes including audit, training, and service improvement.

LEGAL BASIS FOR PROCESSING

We process your data under the following lawful bases:

• Consent — for marketing and some personal data where required.
• Contract — where processing is necessary to deliver our services.
• Legal obligation — compliance with medical and tax regulations.
• Legitimate interests — for business improvement and non-intrusive communication.
• Explicit consent (special category data) — for health-related information.

HOW WE STORE AND PROTECT YOUR DATA

• Medical and health data are stored in encrypted systems with restricted access.
• Paper records, if any, are kept in locked, secure facilities.
• We implement multi-factor authentication, firewalls, and intrusion monitoring.
• Data is stored within the UK and EU. If transferred outside, appropriate safeguards such as Standard Contractual Clauses are in place.

SHARING YOUR DATA

We may share your data with:

• Professionals within Modern Man Clinic.
• Accredited laboratories, pharmacies, and partner healthcare providers.
• Payment processors and IT service providers.
• Regulators, insurers, or legal authorities where required by law.

DATA RETENTION

• Medical records: retained for at least 8 years after last treatment, as required by UK law.
• Marketing and enquiry data: retained for up to 2 years unless you withdraw consent sooner.
• Financial records: retained for 7 years for tax compliance.

YOUR RIGHTS

Under GDPR and UK Data Protection law, you have the right to:

• Access your personal data.
• Rectify inaccuracies.
• Erase your data, subject to legal and medical retention requirements.
• Restrict processing.
• Data portability.
• Withdraw consent where applicable.
• Lodge a complaint.

COOKIES AND TRACKING

We use cookies to improve website functionality and user experience. You may disable cookies in your browser settings, but some features may not function properly.

MARKETING COMMUNICATIONS

We may send you updates about services, events, or offers if you have opted in. You can unsubscribe at any time via the link in our emails.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any changes will be published on our website, with the effective date updated accordingly.