Privacy Policy
1. Introduction
At Wellbeing London, accessible at wellbeing-london.com, we are committed to safeguarding your privacy and protecting the personal data you share with us. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws. Your trust is important to us, and we adopt a privacy-first approach to ensure your information is always handled with utmost care and responsibility.
2. Scope of This Policy and Data Controller Role
This Privacy Policy applies to all visitors, users, and customers of the Wellbeing London website and associated services. For the purposes of applicable data protection laws, the data controller responsible for your personal data is Wellbeing London. Questions, concerns, or requests related to this policy may be directed to our Data Protection Team at [email protected].
3. Categories of Data Processed
Wellbeing London processes various categories of personal information, which may include:
A. Usage Data
Collected when you interact with our website. Includes IP address, browser type and version, referring website, device identifiers, session data, pages viewed, and the times you access our services.
B. Account Data
Provided when creating an account or making a purchase. Includes full name, billing and shipping address, email address, and telephone number.
C. Profile Data
Collected to enhance your user experience. May include preferences, purchase history, favorites, product interests, and behavioral insights derived from your interactions.
D. Communication Data
Includes records of communications with our support team, responses to surveys, contact history, and submitted inquiries.
E. Technical Data
Includes device information such as operating system, hardware details, system configurations, screen resolution, and mobile network information.
F. Transaction Data
Includes purchase records, payment method details (excluding full credit card numbers, which are processed by third-party payment providers), delivery instructions, and order fulfillment status.
G. Preference Data
Information you provide regarding your consent for receiving marketing communications, topic relevance, and notification preferences.
4. Legal Bases for Processing
We rely on the following legal bases to lawfully process your personal data:
– Contractual Necessity: When processing is required to fulfill the terms of service or facilitate a purchase requested by you.
– Consent: When you have explicitly granted us permission (e.g., subscribing to a newsletter).
– Legitimate Interest: For purposes such as fraud prevention, improvement of services, customer relationship management, and network security, provided such interests are not overridden by your fundamental privacy rights.
– Legal Obligation: When processing is mandated by legal or regulatory requirements.
5. Your Rights Under Data Protection Laws
You are entitled to exercise the following rights in respect of your personal data:
– Access: Request a copy of the personal data we hold about you.
– Rectification: Request correction of inaccurate or incomplete data.
– Erasure: Request deletion of your personal data under certain circumstances.
– Restriction: Request the limitation of processing where accuracy or legality is contested.
– Portability: Request a structured, commonly used, and machine-readable copy of your data to transfer to another data controller.
To exercise any of these rights or to withdraw consent, contact us at [email protected].
6. Security Measures
We take appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These include:
– End-to-end encryption in data transmission
– Role-based access control and authentication mechanisms
– Regular system backups
– Security training for relevant personnel
– Secure data storage and processing environments
7. International Data Transfers
Some of the service providers that process data on our behalf operate in jurisdictions outside the UK or European Economic Area (EEA), including the United States. We ensure all international transfers of your personal data are covered by appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, and compliance with relevant regional data privacy standards.
8. Data Retention
We retain personal information only as long as necessary for the purposes outlined in this policy:
– Usage and Technical Data: Up to 12 months, for analytics and operations
– Account and Transaction Data: Retained for 7 years for legal, accounting, and tax compliance
– Communication Data: Stored for 2 years for customer support purposes
– Marketing Preference Data: Retained until consent is withdrawn
When no longer required, data is securely deleted or anonymized.
9. Cookie Policy
We use cookies and similar tracking technologies to enhance user experience and analyze site traffic. Cookies fall into the following categories:
– Essential Cookies: Necessary for basic site functionality and security.
– Functional Cookies: Remember your settings and preferences.
– Analytics Cookies: Help us understand how visitors engage with the site (e.g., Google Analytics).
– Performance Cookies: Monitor and improve site speed, responsiveness, and error management.
Cookies do not give us access to your computer or private information beyond what you voluntarily provide.
10. Cookie Management and Consent Compliance
Upon your first visit to wellbeing-london.com, you will encounter a cookie consent banner in compliance with GDPR and CCPA regulations. You may manage or withdraw consent at any time using our Cookie Settings tool or by adjusting browser preferences. CCPA residents may exercise the “Do Not Sell My Personal Information” right by contacting us at [email protected].
11. Children’s Privacy
We do not knowingly collect personal data from children under the age of 13. If we discover that such data has been collected without appropriate parental consent, we will take immediate steps to delete the information from our systems.
12. Updates to This Policy
We may revise this Privacy Policy periodically to reflect changes in regulatory requirements, technological advancements, or our business practices. When we make significant updates, we will notify users through appropriate channels such as our website or direct communication.
13. Contact Us
For any inquiries or concerns related to this Privacy Policy or the handling of your personal data, please contact us at:
Email: [email protected]
Website: https://wellbeing-london.com
We are fully committed to compliance with applicable data protection legislation and welcome any feedback or requests regarding your privacy rights or this privacy policy.