Privacy Policy

This Privacy Notice for Well Bath Ltd ("we", "us", or "our") describes how and why we might access, collect, store, use, and share ("process") your personal information when you use our services ("Services"), including when you visit our website at wellbath.co.uk or engage with us in other related ways.

Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. Questions or concerns can be sent to info@wellbath.co.uk.

Summary of key points

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.

Do we process sensitive personal information? No. We do not process sensitive personal information (racial or ethnic origin, sexual orientation, religious beliefs, and similar).

Do we collect information from third parties? We may collect limited data from public databases, marketing partners, social media platforms, and other outside sources.

How do we process your information? To provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We only process your information when we have a valid legal reason.

How do we keep your information safe? Through appropriate organisational and technical measures. However, no electronic transmission or storage can be guaranteed 100% secure.

What are your rights? Depending on where you are located, the applicable privacy law may give you rights over your personal information. Contact us to exercise them.

1. What information do we collect?

Personal information you provide. We collect information you voluntarily provide when you contact us, make a booking, or otherwise interact with the Services. This may include:

• Names
• Phone numbers
• Email addresses

Sensitive information. We do not process sensitive information.

Payment data. If you make a purchase, payment data is handled and stored by Acuity Scheduling (a Squarespace subsidiary). Their privacy notice is available at squarespace.com/privacy.

All personal information you provide must be true, complete, and accurate. Please notify us of any changes.

2. How do we process your information?

We process personal information for a variety of reasons, including:

• To deliver our services to you
• To send administrative information about changes to our terms and policies
• To manage bookings, payments, and refunds
• To enable communication with practitioners and teachers
• To save or protect an individual's vital interest, such as to prevent harm

3. What legal bases do we rely on?

Under the UK GDPR, we rely on the following legal bases:

• Consent — where you have given us permission for a specific purpose. You can withdraw consent at any time.
• Performance of a contract — where processing is necessary to fulfil our obligations to you.
• Legal obligations — where we are required to comply with legal obligations.
• Vital interests — where processing is necessary to protect your vital interests or those of a third party.

4. When and with whom do we share your information?

We may share information in the following situations:

• Business transfers — in connection with any merger, sale, or acquisition.
• Google Maps Platform APIs — for location and mapping features.
• Acuity Scheduling — for bookings and payments.

5. Cookies and tracking

We use cookies and similar tracking technologies to gather information when you interact with our Services. Specific information about how we use these technologies is set out in our Cookie Policy.

We may share data with Google Analytics to track and analyse the use of the Services. To opt out of Google Analytics tracking, visit tools.google.com/dlpage/gaoptout.

6. How long do we keep your information?

We keep personal information for as long as necessary to fulfil the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When no ongoing legitimate business need exists, we delete or anonymise your information.

7. How do we keep your information safe?

We have implemented appropriate technical and organisational security measures. However, no electronic transmission or storage can be guaranteed 100% secure. Transmission of personal information to and from our Services is at your own risk.

8. What are your privacy rights?

In the UK and EEA, you have rights that may include:

• Access to and a copy of your personal information
• Rectification or erasure of your information
• Restriction on processing
• Data portability
• Objection to processing in certain circumstances

To exercise any of these rights, please email info@wellbath.co.uk. If you believe we are unlawfully processing your personal information, you also have the right to complain to the UK Information Commissioner's Office (ICO).

Withdrawing consent. Where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

Opting out of marketing. You can unsubscribe from marketing emails using the unsubscribe link in the email, or by emailing us.

9. Do-not-track features

We do not currently respond to Do-Not-Track browser signals. If a uniform standard is adopted in future, we will update this notice accordingly.

10. Updates to this notice

We may update this Privacy Notice from time to time. Material changes will be indicated by an updated "Last updated" date, and where appropriate we may notify you directly.

11. Contact

Questions or comments about this notice can be sent to:

Well Bath Ltd
Woolley Lane, Charlcombe
Bath BA1 8BA
info@wellbath.co.uk
07986 380327

12. Review, update, or delete your data

To request access to, correction of, or deletion of your personal information, email info@wellbath.co.uk. We will consider and act upon your request in accordance with applicable data protection laws.