Privacy & Cookie Notice
This notice explains how Comera Movement Science Limited ("we", "us", "our"), trading as The Performance Matrix® (TPM), collects, uses, shares and protects personal data when you visit this website or get in touch about TPM, and your rights under UK data protection law.
It covers visitors to this website and people who enquire about or purchase TPM products. TPM is used by practitioners (physiotherapists, clinics, sports scientists) to screen and retrain their own clients — those clients' data is processed by the practitioner within the TPM system itself, which is covered by a separate agreement between us and the practitioner, not by this website notice.
Who we are
Comera Movement Science Limited is the data controller for the personal data described in this notice.
- Data controller: Comera Movement Science Limited, a company registered in England and Wales (company number 03854711).
- Registered office: Origin Workspace, 40 Berkeley Square, Bristol, BS8 1HP.
- ICO registration number: Z1241279.
- Data protection contact: privacy@comeragroup.co.uk.
We are a small team. Having assessed our processing, we are not required to appoint a statutory Data Protection Officer; the contact above handles all data protection matters. This notice is governed by UK data protection law, principally the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) for cookies and marketing.
What data we collect
- Enquiry data you give us through our enquiry form: your name, email address, phone number and clinic/organisation (if you provide them), which product you're asking about, your message, and whether you opt in to marketing.
- Purchase data: if you buy a TPM licence, payment is taken directly by our payment processor, Stripe — we do not see or store your card details. We receive confirmation of what was purchased and the billing name/email Stripe passes to us, so we can set up your licence and get in touch if there's a problem with your order.
- Communications: the content of any emails or messages you send us.
- Technical & usage data: IP address, device and browser type, pages visited and referring pages — collected through cookies and analytics, and only with your consent for non-essential cookies (see Cookies below).
Please don't include sensitive personal information (such as your clients' health details) in an enquiry message — this website is not intended to collect special category data.
How we use your data and our lawful bases
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Respond to your enquiry | Taking steps at your request before entering a contract (Art. 6(1)(b)), and our legitimate interests in responding to enquiries (Art. 6(1)(f)) |
| Process your purchase and set up your licence | Performance of a contract (Art. 6(1)(b)) |
| Manage our relationship with you and keep business records | Legitimate interests; legal obligation |
| Send you marketing (occasional TPM news and offers) | Consent (Art. 6(1)(a)) — only if you opt in; you can withdraw at any time |
| Measure and improve the website | Consent (for non-essential analytics cookies) |
We will only send you marketing if you have opted in, and every marketing email includes an unsubscribe link. We do not sell your data or share it with third parties for their own marketing.
Cookies and similar technologies
When you first visit our site we show a cookie banner that lets you accept or reject non-essential cookies. Non-essential cookies are not set until you consent, and you can change your choice at any time by clearing the site data in your browser. We use the following categories:
| Category | Examples | Purpose | Consent needed? |
|---|---|---|---|
| Strictly necessary | A record of your cookie choice, stored in your browser | Remembers your consent decision so we don't ask again, and keeps the site working | No — required for the service |
| Payment | Cookies set by Stripe during checkout | Lets Stripe process your payment securely and prevent fraud | No — strictly necessary to complete a purchase you initiate |
| Video | Zoho WorkDrive (zpcc, zalb_*) | Plays our demo video. The player is not loaded until you press play, so these cookies are only ever set if you choose to watch it | Set only when you play the video |
| Analytics / performance | Google Analytics (_ga, _ga_*) | Measures how the site is used so we can improve it | Yes |
Google Analytics loads only after you accept analytics cookies (and is not yet active on this site — it stays off until we set a live measurement ID). We enable IP anonymisation and do not use it for advertising. Google Analytics cookies last up to 2 years; we retain the analytics data for up to 14 months. You can also block or delete cookies through your browser settings, though some parts of the site may not work properly without strictly necessary cookies.
Who we share your data with
We do not sell your data. We share it only with providers who help us run our business, each under a contract that requires them to protect it and use it only on our instructions:
- Fasthosts (UK) — website hosting.
- Stripe Payments Europe, Ltd. — processes payments for TPM licence purchases. Stripe is PCI-DSS compliant; we never see or store your full card details.
- Zoho Corporation — WorkDrive (EU) — hosts and plays our demo video. The player only loads if you press play.
- Zoho Corporation — ZeptoMail (EU) — sends transactional emails, such as the confirmation you receive after making an enquiry or purchase.
- Zoho Corporation — Zoho CRM & Zoho Campaigns (where connected) — manages enquiries and leads and, if you opt in, sends our marketing.
- Google — Google Analytics, used only with your consent, once enabled.
We may also disclose data where required by law, by a regulator, or to establish, exercise or defend legal claims.
International transfers
Some of our providers process data outside the UK. Where they do, an appropriate safeguard is in place:
| Provider | Role | Location | Safeguard |
|---|---|---|---|
| Fasthosts | Hosting | United Kingdom | No overseas transfer |
| Stripe | Payment processing | EU / United States | UK Extension to the EU–US Data Privacy Framework and/or Standard Contractual Clauses |
| Zoho (WorkDrive) | Demo video hosting | European Union | UK adequacy regulations for the EEA |
| Zoho (ZeptoMail) | Transactional email | European Union | UK adequacy regulations for the EEA |
| Zoho (CRM / Campaigns) | CRM & marketing | International | International Data Transfer Agreement (IDTA) / UK Addendum to the EU Standard Contractual Clauses |
| Analytics | United States / global | UK Extension to the EU–US Data Privacy Framework and/or the IDTA |
Details of the specific safeguards are available on request from our data protection contact.
How long we keep your data
- Enquiries that don't lead to a purchase: up to 24 months from your last contact with us, then deleted.
- Marketing contacts: until you unsubscribe or withdraw consent (we also review our list periodically).
- Website analytics: up to 14 months.
- Purchase & licence records: for as long as your licence is active, plus the period needed to meet our accounting and tax obligations (normally 6 years).
We keep personal data no longer than necessary for the purpose it was collected, unless the law requires us to keep it for longer.
How we protect your data
We use technical and organisational measures proportionate to the data we hold: encryption in transit (HTTPS/TLS), reputable service providers, access limited to those who need it, and protections on our forms against spam and abuse. No system is completely secure, but we take reasonable steps to safeguard your information.
Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or object to our processing of your personal data, to data portability, and to withdraw consent at any time where processing is based on consent. To exercise any of these, email privacy@comeragroup.co.uk. We will respond within one month, and there is normally no charge.
Complaints
If you have concerns about how we handle your data, please contact us first so we can try to put things right. You also have the right to complain to the UK supervisory authority: the Information Commissioner's Office (ICO) — ico.org.uk, helpline 0303 123 1113.
Changes to this notice
We may update this notice from time to time. We will post the updated version here and change the "last updated" date above. Where changes are significant, we will take reasonable steps to highlight them.
Contact us
Comera Movement Science Limited
Origin Workspace, 40 Berkeley Square, Bristol, BS8 1HP
Data protection: privacy@comeragroup.co.uk