1. Introduction

1.1 Cotswold Hyperbarics & Wellness (“we”, “us”, or “our”) collects and processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.2 This Privacy Policy explains what data we collect, how we use it, and your rights. This policy is available on our website or upon request.

2. Who We Are

2.1 Cotswold Hyperbarics & Wellness is a UK-based wellness clinic located at:
38 High Street, Cheltenham, Gloucestershire, GL50 1EE

2.2 We operate as a non-CQC registered wellness service provider.

2.3 We are the data controller responsible for your personal data.

2.4 Contact details:

3. Personal Data We Collect

3.1 We collect personal data when you:

  • Book appointments via our online system (Cliniko)
  • Contact us via phone, email, or website
  • Visit our clinic
  • Interact with our website

3.2 Types of data we collect:

  • Website Data: IP address, browser type, and usage data via cookies
  • Basic Information: Name, email address, phone number
  • Booking Information: Appointment history and preferences
  • Health & Wellness Information: Relevant information you provide to ensure safe and appropriate treatments
  • Payment Data: Processed securely via Stripe (we do not store full card details)

4. How We Use Your Data

We use your personal data to:

  • Deliver targeted advertising (via Meta Ads, where consent is given)
  • Provide wellness treatments and services
  • Manage bookings and appointments (via Cliniko)
  • Communicate with you regarding your appointments
  • Process payments securely
  • Send marketing communications (via Mailchimp, where consent is given)
  • Improve our website and services (via Google Analytics)

5. Lawful Basis for Processing

We rely on the following legal bases:

  • Contract – to provide booked services
  • Consent – for marketing emails and cookies
  • Legitimate interests – for business improvement and service operation
  • Legal obligation – where required by law

Where we process health-related information, we do so:

  • Where necessary to ensure safe delivery of services
  • With your explicit consent

6. Third-Party Services

We use trusted third-party providers to operate our business:

  • Cliniko – appointment booking and client records
  • Stripe – payment processing
  • Mailchimp – email marketing
  • Google Analytics – website analytics
  • Meta Ads (Facebook/Instagram) – advertising

These providers may process your data on our behalf and are required to handle it securely and lawfully.

7. Sharing Your Data

We do not sell your personal data. We may share data only when necessary:

  • With service providers listed above
  • If required by law or legal obligation
  • In the event of a business transfer or restructuring

8. International Transfers

Some of our service providers (e.g. Google, Meta, Mailchimp) may process data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, such as:

  • Adequate data protection measures
  • Standard Contractual Clauses (SCCs)

9. Data Security

We take appropriate measures to protect your data, including:

  • Secure systems and encryption
  • Restricted access to personal data
  • Use of trusted third-party platforms

Please note: Email communication is not fully secure. Avoid sending sensitive personal information via email where possible.

10. Cookies & Tracking

10.1 We use cookies and similar technologies to:

  • Improve website functionality
  • Analyse traffic (Google Analytics)
  • Support advertising (Meta Ads)

10.2 Non-essential cookies are only used with your consent via our cookie banner.

10.3 You can manage cookie preferences through your browser settings.

11. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (where applicable)
  • Restrict processing
  • Object to marketing
  • Request data portability

To exercise your rights, contact:
enquiries@cotswoldhyperbarics.co.uk

12. Complaints

If you have concerns:
1. Contact us directly so we can resolve the issue
2. Contact the UK Information Commissioner’s Office (ICO):

13. Data Retention

We retain data only as long as necessary:

  • Client records: up to 8 years
  • Marketing data: until you opt out
  • Booking records: as required for business and legal purposes

14. Third-Party Links

Our website may contain links to other websites. We are not responsible for their privacy practices.

15. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website.