Legal — Firstcause Lab

Privacy policy.

What we collect, why we collect it, and the control you have over it. Written to be read, not skimmed past.

Last updated 24 July 2026 · Version 1.0

01

Who we are

Firstcause Lab is the trading name of Maximum Performance Training Ltd, a company registered in England and Wales. We operate a movement, metabolic and coaching laboratory in Hackney, London.

For the purposes of UK data protection law we are the data controller for the personal data described in this notice. We are registered with the Information Commissioner's Office (ICO).

Legal entity
Maximum Performance Training Ltd
Trading as
Firstcause Lab
Address
Studio 6, 43 De Beauvoir Rd, London N1 5TH
Data enquiries
02

What we collect

When you use a form on this site

  • Your name, email address and — if you give it — your phone number.
  • The subject of your enquiry, and anything you choose to write in the message field.
  • On the referral form, the professional details you provide about yourself and the nature of the referral.

When you become a client

  • Assessment data generated in the lab — gait and posture measurements, spinal imaging, metabolic and neuromuscular test results.
  • Relevant health and training history you share with us so we can interpret those results safely.
  • Appointment records and coaching correspondence.

Automatically

Our hosting provider records standard server information such as IP address, browser type and pages requested, for security and to keep the site running. We do not use this to build a profile of you.

We do not buy personal data, we do not sell it, and we do not use it to train advertising profiles.

03

Why we use it, and our lawful basis

To answer your enquiry
Legitimate interests — you contacted us and expect a reply
To deliver an assessment or coaching programme
Performance of a contract with you
To interpret health and assessment data
Your explicit consent (see section 04)
To keep records for accounting and insurance
Legal obligation
To keep the website secure
Legitimate interests

We only ever use your data for the purpose you gave it to us for. If we wanted to use it for something materially different, we would ask you first.

04

Health data

Some of what we handle — injury history, spinal imaging, metabolic results, medical background — is special category data under UK GDPR and carries extra protection.

We process it on the basis of your explicit consent, given at intake before any assessment takes place. You can withdraw that consent at any time by emailing us; we will stop processing and, where we are not legally required to retain records, delete it.

Assessment data is discussed with you and used to build your programme. It is not shared with anyone outside the lab without your specific instruction — including with a referring practitioner, unless you have asked us to report back to them.

05

Who we share it with

We use a small number of service providers who process data on our behalf, under contract and only on our instructions:

Web3Forms
Delivers website form submissions to our inbox
Cloudflare
Hosts this website and protects it from attack
Email & scheduling provider
Correspondence and appointment booking
Accountant
Statutory bookkeeping, where a record involves payment

Some of these providers operate servers outside the UK. Where data is transferred internationally, it is protected by the safeguards UK law requires, such as the International Data Transfer Agreement or an adequacy decision.

We will disclose data to a third party outside this list only where we are legally obliged to, or where you have asked us to.

06

How long we keep it

Enquiries that don't become clients
Up to 12 months, then deleted
Client assessment & health records
8 years after your last appointment, in line with professional practice
Financial records
6 full financial years, as HMRC requires
Server logs
Short-term, typically under 30 days
07

Your rights

Under UK GDPR you have the right to:

  • Ask what data we hold about you, and receive a copy of it.
  • Have inaccurate data corrected.
  • Ask us to delete data, where we have no continuing legal reason to keep it.
  • Ask us to restrict how we use it, or object to a particular use.
  • Receive your data in a portable format, or have it sent to another provider.
  • Withdraw consent at any time, where consent is our basis for processing.

Email [email protected] and we will respond within one month. There is no charge, and we will not ask why.

08

Cookies

This website sets no cookies and runs no analytics, advertising or tracking scripts. There is nothing to consent to and nothing to opt out of.

If that changes — for example if we add a booking widget or visitor analytics — we will update this notice and ask for your consent before any non-essential cookie is set.

09

Complaints

If you are unhappy with how we have handled your data, please tell us first — we would rather fix it directly. Email [email protected].

You also have the right to complain to the UK regulator at any time: the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF · 0303 123 1113.

10

Changes to this notice

We review this notice at least annually. When we make a material change we update the version and date at the top, and — if the change affects how we use data you have already given us — we contact you directly.

Data enquiries

Maximum Performance Training Ltd, trading as Firstcause Lab

Studio 6, 43 De Beauvoir Rd, London N1 5TH

[email protected]