Privacy Policy.

We may collect and process the following personal data about you:

• Identity and contact data: your name, email address, phone number, business or clinic name, and postal address.
• Account data: your login details and membership status.
• Payment data: billing details and records of payments. Full card details are handled by our payment processor and are not stored by us.
• Membership activity data: the content you access, sessions you attend, contributions you make in the community, and your progress.
• Communications data: messages, enquiries, and correspondence between you and us.
• Technical data: information such as your IP address, device, and how you use our platforms, collected through our third-party providers.

We collect data when you:

• enquire about or sign up for the Collective;
• make a payment;
• use the membership platform and community;
• attend calls, sessions, or events; or
• contact us by email or through our platforms.

We use your personal data only where we have a lawful basis to do so:

• To perform our contract with you: to set up and manage your membership, provide access to content and the community, process payments, and provide support.
• For our legitimate interests: to run and improve the Collective, keep our members and community safe, prevent fraud and misuse, and communicate with you about your membership. We only rely on this where your interests and rights do not override ours.
• To comply with a legal obligation: for example, keeping accounting and tax records.
• With your consent: for optional marketing about other products or services we offer. You can withdraw consent at any time.

4.1. We may send you service messages about your membership (for example, billing, access, and important updates). These are necessary to run your membership and are not marketing.

4.2. We will only send you marketing emails where you have agreed or where permitted by law. You can opt out at any time using the unsubscribe link in our emails or by contacting us.

We do not sell your personal data. We share it only with trusted third parties who help us run the Collective, currently including:

• Stripe Payments Europe Ltd (payments), Vercel Inc. (web hosting and content delivery), Supabase, Inc. (member accounts, database, and file storage, hosted in the EU/UK region), Resend, Inc. (transactional email), Typeform SL (form submissions and monthly report intake), Anthropic, PBC (AI processing for the tools inside the platform, see clause 6 below), and Google LLC (Google Calendar, for our shared community calendar).
• Community and course platforms (for example, Skool or similar) that host member community spaces.
• Professional advisers such as accountants and lawyers where necessary.
• Government bodies or authorities where we are legally required to do so.

These providers act as our processors and may only use your data on our instructions and in line with their own data protection obligations. We keep this list of providers under review; if we change our providers we will update this policy accordingly.

6.1. Some tools inside the Collective use artificial intelligence (AI) to help you generate outputs. Examples include the daily ideation tool and the 13-week sprint planner. When you use these tools, the answers you type into them are sent to our AI provider, Anthropic, PBC (based in the United States), to generate the response you see back. We use Anthropic under a written data processing agreement.

6.2. What we send. Only the answers you type into the tool for that specific run. For example, the numbers and notes you enter in the sprint planner, or your description of your last patient conversation in the ideation tool. We do not send data you have not chosen to put into the tool.

6.3. What Anthropic does with it. Anthropic processes your inputs to return your output. Under our commercial agreement, Anthropic does not use your inputs to train their models. Anthropic retains inputs and outputs only for the short period needed to deliver the service and for trust and safety monitoring, in line with their published policies.

6.4. No automated decisions about you. We do not use AI to make decisions about you that produce legal or similarly significant effects. The AI generates content on your request. You decide what to do with it. You always have the right to a human review of any decision we make about your membership.

6.5. Please don't enter identifying patient data. The ideation tool is designed to be used with anonymised or non-identifying descriptions of patient conversations. Please do not include a patient's name, contact details, or clinical identifiers when using it.

7.1. Some of our providers are based in, or store or process data in, countries outside the UK, including the United States (Vercel, Resend, Anthropic, Google LLC) and the European Economic Area (Stripe, Typeform, Supabase).

7.2. Where data is transferred outside the UK, we rely on appropriate safeguards under UK data protection law. For transfers to the United States, this includes the UK Extension to the EU-US Data Privacy Framework (where the provider is certified), the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum. For transfers to the EEA, we rely on the UK Government's adequacy regulations covering those countries.

We keep your personal data only for as long as necessary for the purposes set out in this policy. This means:

• for the duration of your membership and for a reasonable period afterwards; and
• longer where we need to keep records to meet legal, tax, or accounting obligations (usually up to six years).

When we no longer need your data, we will delete or anonymise it securely.

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data in certain circumstances;
• object to or request restriction of our processing in certain circumstances;
• request portability of the data you provided to us; and
• withdraw consent at any time where we rely on consent.

To exercise any of these rights, contact us at hello@futurephysio.app. We will respond within one month. There is normally no charge.

Our website and platforms may use cookies and similar technologies to help them function and to understand how they are used. Where required, we will ask for your consent. You can control cookies through your browser settings. Please see any cookie notice on our website for more detail.

We use appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. No online service can be guaranteed to be completely secure, but we take reasonable steps to keep your data safe.

If you have concerns about how we handle your personal data, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at www.ico.org.uk or by calling 0303 123 1113.

We may update this Privacy Policy from time to time. The latest version will always be available to members, and we will tell you about any significant changes.

MOVE Consultancy Limited, trading as Future Physio Collective
Email: hello@futurephysio.app
Registered office: The Vehicle Store, Sparbottom Farm, Hags Road, Harrogate HG3 1EQ
Company number: 16489774