Privacy policy

Optimise is operated by Love Medical Ltd ("we", "us"), Unit 1 Willan Enterprise Centre, Fourth Avenue, Trafford Park, Manchester M17 1DB, United Kingdom.

Love Medical Ltd is the data controller for the personal data described in this policy. This policy is written under the UK GDPR, the Data Protection Act 2018, and the EU GDPR.

You can contact us about privacy at any time at hello@optimise.fitness.

The Optimise system is designed so that no personal data is ever stored on our platform by the app or the clinician portals. Patient data that can identify a person lives on hospital and clinician systems, not on ours. The sections below set out exactly what each part of the system does and does not store.

Contact form. If you request a demo, we store the details you give us — your name, work email, organisation, role and message — so that our team can respond to you. We use this data only to handle your enquiry and any follow-on commercial discussion. We never sell it or share it with third parties for marketing.

Lawful basis: legitimate interests (responding to enquiries) and steps prior to entering a contract at your request.

Website analytics. We record which pages are visited, when, and the referring site, tied to a random session identifier generated in your browser. This identifier is not linked to your name, email or any account, and we use it only to understand aggregate site usage. Bot traffic is filtered out. No analytics data is shared with advertising networks.

Emails. Contact form submissions are delivered to us by our email processor, acting on our instructions under a data processing agreement.

The Optimise app collects fitness and exercise data (such as session completion, heart rate and activity measurements) and associates it with an anonymous identifier. No name, date of birth, contact details or NHS number are stored on our systems alongside that data.

The link between the anonymous identifier and the real person exists only on the systems of the hospital or clinical team that prescribed the programme. Without information held on those separate clinical systems, it is not possible to link data held by Optimise to an individual.

When you are invited onto a programme, your clinical team is the data controller for your identifiable health record. Love Medical Ltd processes the associated fitness data on their instructions and only in its anonymised form.

The clinician and administrative portals (including my.optimise.fitness and therapist.optimise.fitness) are used by authorised healthcare professionals and programme staff. These portals display and process patient information in the course of care, but they do not store personal patient data on our systems — identifiable records remain on the hospital or clinical systems from which they are accessed.

Portal user accounts (clinician and staff sign-in credentials) are the only personal data held for portal access, and are used solely to authenticate authorised users and maintain an audit trail of access.

• We never store identifiable patient data on our platform.
• We never sell personal data.
• We never use patient or visitor data for advertising.
• We never share data with third parties except the processors needed to operate the service, under contract.

Contact form submissions are kept only for as long as needed to handle your enquiry and any resulting business relationship. Anonymous website analytics are retained in aggregate. Fitness data associated with anonymous identifiers is retained for the duration of the clinical programme and any period agreed with the prescribing clinical team.

We aim to keep data within the UK and EEA. Where a service provider processes data outside these areas, we rely on adequacy regulations or appropriate safeguards such as standard contractual clauses.

Under the UK and EU GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing;
• data portability;
• withdraw consent where processing is based on consent.

To exercise any of these rights, email hello@optimise.fitness. For data about your care, please contact your clinical team, as they control the identifiable record. We will respond within one month.

You also have the right to complain to the Information Commissioner's Office (ICO) in the UK, or to your local EU supervisory authority.

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.