Privacy Policy

Last updated: 29 September 2026

Book an appointment Email Ken a question

Ken Ryan Rehab respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit www.kenryanrehab.ie, contact us, book an appointment, or use our sports massage and strength & conditioning services.

We process personal data in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, and applicable Irish data protection law.

1. Who is responsible for your personal data?

The data controller responsible for your personal data is:

Ken Ryan Rehab
The Bog Road
Crannaghmore
Athlone
Co. Roscommon
N37 WN15
Ireland
Email: [email protected]

If you have any questions about how your personal data is processed, or wish to exercise your data protection rights, you can contact us at the email address above.

2. What personal information do we collect?

Depending on how you interact with Ken Ryan Rehab, we may collect:

Your name
Email address
Telephone number
Appointment and booking information
Information you provide when contacting us
Relevant information about injuries, physical conditions, medical history or other health information that you provide in connection with your treatment or training
Treatment and session notes
Information relevant to your rehabilitation, sports massage or strength and conditioning programme
Information necessary to manage your client record
Information relating to your use of our services

We aim to collect only information that is relevant and necessary for providing our services.

3. Health information

As part of providing sports massage, rehabilitation and strength and conditioning services, you may provide information relating to your physical health, injuries, medical conditions, previous treatment or other health-related circumstances.

Information concerning a person’s health is considered special category personal data under Article 9 of the GDPR and receives additional protection.

We process health information only where we have a lawful basis to do so and where an appropriate condition for processing special category data under Article 9 of the GDPR applies.

Health information may be used to:

Assess your needs
Identify relevant health or injury considerations
Plan and provide sports massage or rehabilitation services
Design and deliver appropriate strength and conditioning programmes
Maintain appropriate client and treatment records
Monitor your progress
Communicate with you about your appointments or services
Protect your safety during sessions
Meet applicable legal or professional obligations

We will not collect or retain health information that is unnecessary for these purposes.

4. How do we use your personal data?

We may use your personal data to:

Respond to enquiries
Arrange and manage appointments
Provide sports massage, rehabilitation and strength and conditioning services
Maintain client and treatment records
Assess relevant health and injury information
Plan and monitor your sessions or programme
Communicate with you regarding appointments and services
Manage our business and administrative activities
Protect the security of our systems and records
Comply with legal obligations
Establish, exercise or defend legal claims where necessary

We do not use your personal data for advertising or targeted marketing.

We do not send marketing messages or promotional communications.

5. Our legal bases for processing

Depending on the circumstances, we may process your personal data under one or more of the following legal bases under Article 6 of the GDPR:

Performance of a contract: where processing is necessary to provide services you have requested.
Legitimate interests: where processing is necessary for legitimate business purposes and your interests and fundamental rights do not override those interests.
Legal obligation: where processing is necessary to comply with a legal obligation.
Consent: where we rely on your consent for a particular processing activity.

Where health information or other special category data is processed, we will also ensure that an appropriate condition under Article 9 of the GDPR applies.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Where is your information stored?

Client and treatment records are stored using Zanda Health, a cloud-based practice management and booking system.

Zanda Health acts as a data processor for client information entered into its platform, processing that information on behalf of practices and their clients.

We remain responsible for determining why and how your client information is processed, while Zanda processes information on our behalf as our service provider.

7. Who do we share your personal data with?

We do not sell your personal information.

We do not routinely share your client or treatment information with other individuals, healthcare providers, employers, insurers or other organisations.

Your information may be processed by Zanda Health as our technology and practice-management service provider because client and treatment records are stored on its platform.

We may disclose information where we are legally required or permitted to do so, for example where necessary to comply with a legal obligation or to protect someone’s vital interests.

8. How long do we keep your information?

We retain personal information only for as long as it is necessary for the purposes for which it was collected, taking into account our legal, professional and business requirements.

Client and treatment records may need to be retained for an appropriate period to allow us to maintain accurate records and comply with applicable legal or professional obligations.

Different categories of information may therefore be retained for different periods.

When personal data is no longer required, we will securely delete it or anonymise it where appropriate.

9. How do we protect your information?

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.

Access to client records is restricted to what is necessary for the operation of Ken Ryan Rehab.

Zanda Health also describes technical and organisational security measures for information stored within its platform, including access controls and encryption.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

10. Website cookies

Our website may use cookies or similar technologies that are necessary for the website to function.

We do not use Google Analytics, Meta Pixel or Google Ads.

We do not use cookies for targeted advertising or behavioural advertising.

If this changes in the future, we will update this Privacy Policy and, where required, obtain appropriate consent before using non-essential cookies or tracking technologies.

11. Third-party websites

Our website may contain links to third-party websites or services.

If you follow a link to another website, that website will have its own privacy policy and privacy practices. We are not responsible for the privacy practices of third-party websites.

We recommend reviewing the privacy information of any third-party website you visit.

12. Your data protection rights

Under the GDPR, you may have the following rights, subject to applicable legal conditions and exemptions:

The right to access your personal data
The right to have inaccurate personal data corrected
The right to request erasure of your personal data in certain circumstances
The right to request restriction of processing in certain circumstances
The right to object to certain processing
The right to data portability in certain circumstances
The right to withdraw consent where processing is based on consent
The right to lodge a complaint with the Data Protection Commission

If you wish to exercise any of these rights, please contact: [email protected]

We may need to verify your identity before responding to a request.

13. Data Protection Commission

If you have concerns about how your personal data has been handled, you can contact Ken Ryan Rehab using the details above.

You also have the right to lodge a complaint with the Data Protection Commission (DPC), Ireland’s data protection supervisory authority.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, how we process personal data, or changes in applicable law.

The latest version will be published on this page, together with the date it was last updated.

15. Contact us

If you have any questions about this Privacy Policy or how Ken Ryan Rehab handles your personal data, please contact: