top of page

Privacy Policy

​

1. Introduction

1.1 Ebb and Flow Wellness ("we", "us", "our") is committed to protecting your personal data and respecting your privacy.
1.2 This Privacy Policy outlines how we collect, use, store, and protect your personal data when you use our website, book our services, or otherwise interact with us.

 

2. Who We Are

2.1 Ebb and Flow Wellness is the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.
2.2 Our contact details are:

 

3. What Data We Collect

3.1 We may collect the following types of personal data:

  • Name and contact details (e.g., email address, phone number, postal address).

  • Payment information (e.g., card details, billing address).

  • Health information you provide for participation in wellness activities.

  • Website usage data (e.g., IP address, browser type, cookies).
    3.2 Sensitive personal data, such as health information, will only be collected with your explicit consent.

 

4. How We Collect Your Data

4.1 We collect personal data in the following ways:

  • Directly from you when you book services, complete forms, or contact us.

  • Automatically through your use of our website, via cookies and tracking technologies.

 

5. How We Use Your Data

5.1 We use your data to:

  • Process bookings and payments.

  • Communicate with you about your bookings or enquiries.

  • Provide personalised wellness services, considering your health information.

  • Improve our website and services.

  • Comply with legal obligations.
    5.2 We will only use your data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose.

 

6. Legal Basis for Processing

6.1 We process your data under the following legal bases:

  • Consent: Where you have given clear consent for us to process your data.

  • Contractual necessity: Where processing is necessary for the performance of a contract with you.

  • Legal obligation: Where processing is required to comply with UK law.

  • Legitimate interests: Where processing is necessary for our legitimate business interests, provided your rights and interests do not override them.

 

7. Data Sharing

7.1 We may share your data with:

  • Service providers (e.g., payment processors, IT support).

  • Legal or regulatory authorities if required by law.
    7.2 We will not sell or rent your data to third parties.

 

8. Data Retention

8.1 We will retain your data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law.
8.2 Once the retention period has expired, your data will be securely deleted or anonymised.

 

9. Your Rights

9.1 Under the UK GDPR, you have the following rights:

  • Access: To request a copy of the personal data we hold about you.

  • Rectification: To correct inaccurate or incomplete data.

  • Erasure: To request deletion of your data ("right to be forgotten").

  • Restriction: To request restriction of data processing.

  • Data portability: To request transfer of your data to another organisation.

  • Objection: To object to processing based on legitimate interests.
    9.2 To exercise your rights, please contact us using the details in Section 2.

 

10. Data Security

10.1 We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.
10.2 However, no system is completely secure, and we cannot guarantee the absolute security of your data.

 

11. Cookies

11.1 Our website uses cookies to improve user experience and analyse website traffic.
11.2 For more information, please see our Cookie Policy [link if available].

 

12. Third-Party Links

12.1 Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

 

13. Changes to this Policy

13.1 We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

 

14. Complaints

14.1 If you have concerns about how we handle your data, please contact us.
14.2 You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

 

15. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

​

bottom of page