Privacy & Cookie Policy
This policy explains how Comera Movement Science Limited ("we", "us", "our", "Comera Movement Science") collects, uses, shares and protects personal data when you visit this website, and your rights under UK data protection law.
It covers visitors to this website. If you buy a course or a product, or use one of our platforms (for example The Performance Matrix®), that service gives you its own privacy information covering the data it processes — this policy does not replace it.
Who we are
Comera Movement Science Limited is the data controller for the personal data described in this policy.
- Data controller: Comera Movement Science Limited, a company registered in England and Wales (company number 03854711).
- Registered office: Origin Workspace, 40 Berkeley Square, Bristol, BS8 1HP.
- ICO registration number: Z1241279.
- Data protection contact: privacy@comeragroup.co.uk.
Having assessed our processing, we are not required to appoint a statutory Data Protection Officer; the contact above handles all data protection matters. This policy is governed by UK data protection law, principally the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) for cookies.
What data we collect
- Enquiry data you give us through our enquiry form: your name, email address, phone number and organisation (if you provide them), the type of enquiry you select, your message, and whether you opt in to marketing.
- Communications: the content of any emails or calls between us.
- Technical & usage data: IP address, device and browser type, pages visited and referring pages — collected through analytics, and only with your consent (see Cookies below).
- Server logs: our web server records requests (including IP address and browser type) for security, abuse prevention and diagnostics. This is necessary to run the site safely and is not used to identify or profile you.
Please don't include sensitive personal information — particularly health or clinical details about yourself or a patient — in an enquiry message. This website is not intended to collect special category data, and it is not a route for clinical information.
How we use your data and our lawful bases
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Respond to an enquiry you send us, by form or by phone | Taking steps at your request before entering a contract (Art. 6(1)(b)), and our legitimate interests in responding to enquiries (Art. 6(1)(f)) |
| Send you an automatic acknowledgement confirming we received your enquiry | Legitimate interests (Art. 6(1)(f)) — confirming receipt of a message you sent us |
| Manage our relationship with you and keep business records | Legitimate interests; legal obligation |
| Send you marketing (occasional updates about our courses and tools) | Consent (Art. 6(1)(a)) — only if you opt in; you can withdraw at any time |
| Keep the website secure, available and free from abuse (server logs) | Legitimate interests (Art. 6(1)(f)) in protecting our systems |
| Measure and improve the website | Consent (Art. 6(1)(a)) for non-essential analytics cookies |
We will only send you marketing if you have opted in, and every marketing email includes an unsubscribe link. We do not sell your data or share it with third parties for their own marketing.
Cookies and similar technologies
When you first visit this site we show a cookie banner that lets you accept or reject non-essential cookies. Non-essential cookies are not set until you consent, and you can change your choice at any time by clearing this site's data in your browser.
| Category | Examples | Purpose | Consent needed? |
|---|---|---|---|
| Strictly necessary | A record of your cookie choice, stored in your browser's local storage | Remembers your consent decision so we don't ask again | No — required for the service |
| Analytics / performance | Google Analytics (_ga, _ga_*) — not currently enabled | Measures how the site is used so we can improve it | Yes |
Analytics is not switched on at the time of writing: accepting cookies currently records your choice and loads nothing else. If we enable Google Analytics it will load only after you accept analytics cookies, with IP anonymisation on and no advertising use. Google Analytics cookies last up to 2 years; we would retain the analytics data for up to 14 months.
Who we share your data with
We do not sell your data. We share it only with providers who help us run this website, each under a contract that requires them to protect it and use it only on our instructions:
- Fasthosts (UK) — website hosting and server logs.
- Zoho Corporation — ZeptoMail (EU) — sends transactional email, namely the acknowledgement you receive after making an enquiry and the notification that reaches our team.
- Zoho Corporation — Zoho CRM & Zoho Campaigns (where connected) — manages enquiries and, if you opt in, sends our marketing.
- Google — Google Analytics, used only with your consent, and only once enabled.
We may also disclose data where required by law, by a regulator, or to establish, exercise or defend legal claims.
International transfers
Where a provider processes data outside the UK, an appropriate safeguard is in place:
| Provider | Role | Location | Safeguard |
|---|---|---|---|
| Fasthosts | Hosting | United Kingdom | No overseas transfer |
| Zoho (ZeptoMail) | Transactional email | European Union | UK adequacy regulations for the EEA |
| Zoho (CRM / Campaigns) | Enquiry management & marketing | International | International Data Transfer Agreement (IDTA) / UK Addendum to the EU Standard Contractual Clauses |
| Analytics (once enabled) | United States / global | UK Extension to the EU–US Data Privacy Framework and/or the International Data Transfer Agreement (IDTA) |
Details of the specific safeguards are available on request from our data protection contact.
How long we keep your data
- Enquiries that don't become customers: up to 24 months from your last contact with us, then deleted.
- Marketing contacts: until you unsubscribe or withdraw consent (we also review our list periodically).
- Server logs: up to 12 months, then deleted.
- Website analytics (once enabled): up to 14 months.
We keep personal data no longer than necessary for the purpose it was collected, unless the law requires us to keep it for longer.
How we protect your data
We use technical and organisational measures proportionate to the data we hold: encryption in transit (HTTPS/TLS), reputable service providers, access limited to those who need it, and protections on our enquiry form against spam and abuse. Enquiries are passed straight to our email and CRM systems — this website does not keep a database of them. No system is completely secure, but we take reasonable steps to safeguard your information.
Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or object to our processing of your personal data, to data portability, and to withdraw consent at any time where processing is based on consent. To exercise any of these, email privacy@comeragroup.co.uk. We will respond within one month, and there is normally no charge.
Complaints
If you have concerns about how we handle your data, please contact us first so we can try to put things right. You also have the right to complain to the UK supervisory authority: the Information Commissioner's Office (ICO) — ico.org.uk, helpline 0303 123 1113.
Changes to this policy
We may update this policy from time to time. We will post the updated version here and change the "last updated" date above. Where changes are significant, we will take reasonable steps to highlight them.
Contact us
Comera Movement Science Limited
Origin Workspace, 40 Berkeley Square, Bristol, BS8 1HP
Telephone: 0117 971 8125
Data protection:
privacy@comeragroup.co.uk