Privacy Policy for Wellbeing London
1. Introduction
At Wellbeing London, accessible at wellbeing-london.com, we are committed to safeguarding the privacy and personal data of all visitors, users, customers, and stakeholders. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information across all interactions with our website and services. Our practices are rooted in a strong commitment to privacy, transparency, and compliance with all applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all personal data processed through wellbeing-london.com and associated services. Wellbeing London is the data controller with respect to the collection and use of your personal data. This means we determine the purposes and means of the processing of your personal information.
If you have any questions about this policy or our data processing practices, you may contact us at: [email protected].
3. Categories of Personal Data We Collect
We collect and process various types of personal data, depending on how you interact with our website and services:
a. Usage Data
We collect data about how users interact with wellbeing-london.com, including IP addresses, browser types, operating systems, pages visited, session duration, referring/exit pages, and clickstream data.
b. Account Data
When you create an account or place an order, we collect identifying information such as your full name, email address, phone number, and postal address.
c. Profile Data
This includes information collected or inferred about your preferences, service usage, purchase history, browsing behaviors, and feedback.
d. Communication Data
When you contact us via email, forms, or support interactions, we collect records of your communications, including correspondence, timestamps, and attachments.
e. Technical Data
We receive technical information including device identifiers, internet service provider details, hardware settings, browser configuration, and system diagnostics to support functionality and security.
f. Transaction Data
We collect records related to purchases and payments, including billing details, transaction IDs, delivery addresses, payment confirmations, and relevant correspondence.
g. Preference Data
We maintain information related to your consent preferences, marketing subscriptions, promotional interests, and responses to surveys or campaigns.
4. Legal Bases for Processing Personal Data
We process personal data based on the following lawful bases as established by GDPR and other applicable laws:
– Consent: Where you have given clear permission for us to process your data for a specific purpose, such as subscribing to newsletters or accepting non-essential cookies.
– Contractual Necessity: To fulfill a contract with you, including product purchases and account management.
– Legal Obligation: When required to comply with legal and regulatory obligations.
– Legitimate Interests: To operate and improve wellbeing-london.com, understand user behavior, enhance security, and provide personalized content—except where such interests are overridden by your rights and interests.
5. Your Rights
Under GDPR, CCPA, and other relevant laws, you have the following rights regarding your personal data:
– Right of Access: Request confirmation and access to the personal data we process about you.
– Right to Rectification: Request that we correct inaccurate or incomplete data.
– Right to Erasure: Request deletion of your personal data under certain conditions.
– Right to Restrict Processing: Request restriction of data processing pending verification of contested information or legal claims.
– Right to Data Portability: Receive your personal data in a machine-readable format and have it transmitted to another controller.
– Right to Object: Object to processing based on legitimate interests or direct marketing.
– Right to Withdraw Consent: Revoke consent when processing is based solely on that legal basis.
You may exercise any of these rights by contacting us at [email protected]. We will respond in accordance with applicable law.
6. Security Measures
We implement robust technical and organizational measures to protect your personal data against unauthorized access, misuse, alteration, or loss. These include but are not limited to:
– Industry-standard encryption protocols (e.g., SSL/TLS) during data transmission
– Role-based access controls and secure databases
– Regular data integrity audits and security monitoring
– Off-site and redundant backups
– Staff privacy training and confidentiality agreements
While no system is infallible, we continuously evaluate and enhance our security measures in line with industry best practices.
7. International Data Transfers
Where necessary, we may transfer your personal data to countries outside the United Kingdom, European Economic Area (EEA), or California. In such cases, we ensure appropriate safeguards are in place, including:
– Standard Contractual Clauses (approved by the European Commission)
– Confirmation of adequacy decisions by relevant authorities
– Binding Corporate Rules or compliance with other suitable legal mechanisms
By continuing to use wellbeing-london.com, you acknowledge and consent to these transfers where they are necessary for service delivery.
8. Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected, or to comply with legal, contractual, or regulatory obligations. General retention periods include:
– Usage Data: up to 26 months for analytics purposes
– Account Data: retained during the life of the customer relationship and up to 6 years thereafter for legal compliance
– Communication Data: up to 3 years from final interaction
– Transaction Data: up to 7 years for financial recordkeeping
– Preference Data: until revoked or superseded
– Technical Data: typically retained for 12 months
9. Cookie Policy
wellbeing-london.com uses cookies and similar technologies to enhance user experience. Categories of cookies we use include:
– Essential Cookies: Required for site functionality, such as login status, shopping cart, and session management.
– Functional Cookies: Enable optional features and user preferences, such as language selection.
– Analytics Cookies: Help us understand website traffic, usage patterns, and performance (e.g., Google Analytics, in anonymized form).
– Performance Cookies: Improve site responsiveness and error tracking.
10. Cookie Management and Compliance
On your first visit to wellbeing-london.com, a cookie banner will allow you to accept or manage non-essential cookies in accordance with GDPR and CCPA. You can update your preferences at any time via our cookie consent tool or adjust your browser settings to disable non-essential cookies.
We honor Do Not Track signals where technically feasible, and California residents may opt out of “sale” of personal data, as defined under CCPA, by using the cookie preferences or contacting us at [email protected].
11. Special Protections for Children
wellbeing-london.com is not intended for children under the age of 13, and we do not knowingly collect personal data from individuals in this age category. If you believe we have collected data from a child under 13 without parental consent, please contact us immediately at [email protected] and we will take appropriate action, including deletion of all applicable records.
12. Policy Updates and Notifications
We reserve the right to update or modify this Privacy Policy at any time in response to legal, technical, or operational developments. Where required by law, we will notify you of material changes, including via email or through prominently displayed messages on wellbeing-london.com.
We encourage all users to review this Privacy Policy periodically to remain informed about how we are protecting their data.
13. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact:
Wellbeing London
Email: [email protected]
We are fully committed to ensuring your privacy rights are respected and that our data practices remain compliant with all applicable privacy and data protection laws.