Privacy Policy

Who we are

The data controller is [LEGAL NAME], trading as abl wellness.

ICO registration number: [ICO NUMBER]

If you have any questions about this policy or how we use your information, email hello@ablwellness.co.uk.

What information we collect

When you contact us

If you use our contact form, we collect your name, email address, any phone number you choose to provide, and the information in your message.

Contact form submissions are sent to us by email and are not stored in a separate website database.

When you book a consultation

Bookings are handled through Cal.com. We receive the information you provide when booking, such as your name, email address, appointment time and any notes you choose to add.

When you become a client

To provide personalised nutritional and wellness advice, we may collect information about your health, medical history, medications, diet, lifestyle, goals and any test results or other information you choose to share with us.

Health information is classed as special category personal data under UK data protection law and receives additional protection.

When you visit this website

We do not use advertising trackers or website analytics.

The services used to operate and secure this website may process technical information such as your IP address, browser type and information about requests made by your device.

How and why we use your information

We use your personal information only where we have a lawful reason to do so.

We use it:

• to respond to enquiries, based on our legitimate interests in communicating with people who contact us;
• to arrange and provide consultations, where this is necessary to take steps at your request before entering into a contract or to perform our contract with you;
• to provide personalised advice, including processing health information where necessary for our work with you. For health information, we rely on the relevant Article 6 lawful basis above and, where applicable, your explicit consent as our additional condition for processing special category data;
• to keep financial and business records, where required by law; and
• to operate and secure this website, based on our legitimate interests in maintaining a safe and reliable service.

Where we rely on your consent, you can withdraw it at any time. This will not affect processing that took place before your consent was withdrawn, but it may mean we are unable to continue providing services that require that information.

We do not sell your personal information, use it for marketing without an appropriate lawful basis, or use automated decision-making or profiling to make decisions about you.

Confidentiality

Information you share during consultations is treated as confidential.

We will not normally disclose your health or consultation information to your GP, another healthcare professional or anyone else without your permission.

We may disclose information without your permission where we are legally required or permitted to do so, including where disclosure is necessary to address a serious risk of harm.

Who we share information with

We use a small number of service providers to operate our website and business. They may process personal information on our behalf where necessary to provide their services.

These include:

• Cloudflare, which hosts, delivers and protects this website;
• Resend, which delivers messages submitted through our contact form; and
• Cal.com, which provides our online booking system.

Cal.com may use cookies or similar technologies that are necessary for its booking service to operate.

You can find more information about how these providers handle personal information in their own privacy policies.

International transfers

Some of our service providers may process information outside the UK, including in the United States.

Where personal information is transferred outside the UK, we take steps to ensure that an appropriate transfer mechanism or safeguard recognised under UK data protection law is in place.

Depending on the provider, this may include UK adequacy regulations, participation in the UK Extension to the EU-US Data Privacy Framework, or approved contractual safeguards.

How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet any legal, professional or insurance requirements.

Our usual retention periods are:

• enquiries that do not lead to a client relationship: [12 months];
• client and consultation records, including relevant health information: [7 years after your last consultation]; and
• financial and tax records: generally 6 years, or longer where required by law.

When information is no longer needed, it is securely deleted or disposed of.

Your rights

Depending on the circumstances, UK data protection law gives you rights to:

• access the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete your information;
• ask us to restrict how your information is used;
• object to certain uses of your information;
• receive certain information in a portable format; and
• withdraw consent where we rely on consent.

These rights are not absolute and may be subject to legal exceptions.

To exercise your rights, email hello@ablwellness.co.uk. We will normally respond within one month.

Keeping your information secure

We take appropriate technical and organisational measures to protect your personal information. These include using secure, access-controlled systems and limiting access to personal information to those who need it.

Complaints

If you have concerns about how we use your personal information, please contact us first so that we can try to resolve them.

You also have the right to complain to the Information Commissioner's Office (ICO).

You can find information about making a complaint at ico.org.uk/make-a-complaint or call the ICO on 0303 123 1113.

Changes to this policy

We may update this privacy policy from time to time. The latest version will always be published on this page with the date of the most recent update shown at the top.