Last updated: 23 August 2026
Who I am
I’m Mark Grayson, and I trade as Back In The Running. I’m a sole trader providing running injury assessment, technique analysis and rehabilitation coaching.
For the purposes of UK data protection law I’m the data controller for the information described here — which means I decide what’s collected and what happens to it, and I’m responsible for looking after it.
Contact: hello@backintherunning.co.uk
Address: 62 Osborne Road, Wisbech, Cambridgeshire
ICO registration number: C2014280
If you have a question about your information, email me directly. It comes to me, not to a team.
What I collect
When you enquire or book
- Your name, email address and phone number
- What you’ve told me about why you’re getting in touch
When you become a client
- Date of birth, height and (optionally) weight
- Your running history, training volume and goals
- Your injury history and current symptoms
- Relevant medical history, medications and health screening answers
- Video and photographs you send me of yourself running
- My own assessment findings, measurements and treatment notes
- Payment records — though card details are handled by my payment provider and never reach me
When you sign up for emails
- Your name and email address
- Whether you opened an email or clicked a link, so I can tell whether what I’m sending is useful
When you visit my website
- Standard technical information such as IP address, browser type and pages viewed
Health information, and why it needs extra care
Most of what I collect about a client counts as special category data under UK GDPR — health information gets stronger legal protection than ordinary personal data, and rightly so.
I’m allowed to process it under Article 9(2)(h) of UK GDPR, together with Schedule 1, Part 1, paragraph 2 of the Data Protection Act 2018 — the provision covering health and social care treatment by someone under a duty of confidentiality. As a member of The ISRM I’m bound by that duty.
In plain terms: I can hold your health information because I’m treating you, and I’m obliged to keep it confidential.
Your videos and photos are treated as health information too. They’re used for your assessment and nothing else, unless you’ve separately and explicitly agreed otherwise.
Why I use your information
| What I do | Why | Legal basis |
|---|---|---|
| Assess your injury and build your plan | It’s the service you’ve asked for | Contract · Article 9(2)(h) |
| Analyse your running videos | To identify what’s driving the problem | Contract · Article 9(2)(h) |
| Keep clinical records | Professional obligation and continuity of care | Legal obligation and legitimate interests |
| Take payment and keep accounts | Running a business, and HMRC requires it | Contract and legal obligation |
| Send you emails you signed up for | You asked for them | Consent |
| Use anonymised findings in educational content | Helping other runners | Explicit consent — always optional |
| Run and improve my website | Keeping it working and useful | Legitimate interests |
You never have to consent to the educational-content use. It’s a separate tick box, it has no effect on the service you receive, and you can withdraw it at any time.
Who else sees your information
I don’t sell your data. I never share it for anyone else’s marketing.
I use a small number of service providers who process data on my behalf, under contracts requiring them to protect it: WordPress.com for website hosting, MailerLite for newsletters if you’ve subscribed, and Stripe for card payments. Card details go straight to Stripe and never reach me.
Beyond that, I’d only share your information if you ask me to — for example sending a summary to your GP, physiotherapist or coach — if I’m legally required to by a court or regulator, or if there’s a serious risk to someone’s safety and the law permits disclosure.
If something in your assessment suggests you need medical attention beyond what I offer, I’ll tell you and recommend you see a GP. I won’t contact them myself without your agreement.
Where your information is held
Most is held in the UK or European Economic Area. Some providers store or process data outside the UK, including in the United States. Where that happens it’s covered by legal safeguards — UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or International Data Transfer Agreements.
How long I keep it
| Clinical records, including video and photos | 8 years from our last contact |
| Records for anyone under 18 | Until their 25th birthday, or 26th if they were 17 at last contact |
| Financial records | 6 years, as HMRC requires |
| Enquiries that don’t become bookings | 12 months |
| Newsletter subscription | Until you unsubscribe |
On video specifically: it’s a large and personal form of data, so if you’d rather I deleted your footage once your assessment is complete and your report written, just say — I’ll do it and note it on your record.
Your rights
Under UK data protection law you can:
- Ask what I hold about you, and get a copy — usually within one month, free
- Have mistakes corrected
- Ask me to delete information — though I may need to keep clinical records for the retention period above
- Ask me to restrict how I use it
- Object to processing based on legitimate interests
- Ask for your data in a portable format
- Withdraw consent at any time, where consent is the basis
To exercise any of these, email hello@backintherunning.co.uk. I may need to confirm your identity first — not obstruction, just making sure I’m not handing your health records to someone else.
Cookies
My website uses cookies for basic functionality and to understand how the site is used. You’ll see a banner on your first visit letting you choose what to accept. You can change your mind at any time using the Cookie settings link in the footer, or through your browser settings.
Complaints
If you’re unhappy with how I’ve handled your information, please tell me first — I’d rather fix it.
You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Changes
If I change how I handle information I’ll update this page and change the date at the top. Anything significant, I’ll tell existing clients directly.