Privacy Notice

Who is responsible

Kinetiq Performance Group is responsible for the personal data you provide to create and administer your account. Each clinic is responsible for the patient and clinical data it enters into KinetiqTec, and acts as the controller for that data. Kinetiq Performance Group processes that data on behalf of the clinic as a processor.

What we collect

• Account information you provide, such as name, email address and role.
• Organisation, clinic, location and practitioner details configured by clinic administrators.
• Patient records, appointments, clinical notes, rehabilitation plans and related clinical data entered by clinic staff.
• Audit and usage logs that record sensitive actions and system activity.

Why we use your data and the lawful basis

• To provide and operate the platform — performance of a contract.
• To administer accounts, billing and access — contract and legitimate interests.
• To maintain security, audit trails and integrity of records — legal obligation and legitimate interests.
• To comply with applicable legal and regulatory obligations.

How long we keep data

Account data is retained while your account is active and afterwards as needed to meet legal, accounting or reporting requirements. Clinical and patient data is retained according to each clinic's own retention policy and applicable professional requirements. Clinics are responsible for defining and applying appropriate retention periods.

Sharing and sub-processors

KinetiqTec is built on Base44, which provides hosting, authentication and the underlying data platform and acts as a sub-processor. We do not sell personal data. Data is shared only as necessary to operate the platform, comply with law, or as instructed by a clinic where the clinic is the controller.

Your rights

Patient data requests are handled by the clinic responsible for that data. Account holders can contact us through the Contact page to exercise rights over their account data.

• Access a copy of your personal data.
• Rectify inaccurate or incomplete data.
• Request erasure where applicable.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent where processing relied on it.

Security

Access is controlled through authenticated accounts, role-based permissions, organisation and clinic scope, and record-level permissions. KinetiqTec is built on Base44 infrastructure; Base44's applicable security documentation governs infrastructure-level claims.

International transfers

Where data is transferred or stored outside your country, appropriate safeguards are put in place consistent with applicable data protection law.

Changes to this notice

We may update this notice from time to time. We will indicate the last-updated date above and, where significant, notify users within the platform.