Last updated: 6 August 2026

1. Introduction

iWellness respects your privacy and is committed to protecting the personal information collected through this website.

This privacy policy explains how we collect, use, store and protect personal information when you:

1. Visit i-wellness.co.uk

2. Submit an enquiry

3. Request or book a consultation

4. Communicate with us through the website

5. Make a payment connected with a website booking

6. Choose your cookie preferences

7. Interact with content, forms or services available through the website

This policy applies specifically to personal information collected through the website.

Information collected separately during the delivery of health, wellness, consultation or coaching services may be covered by an additional client privacy notice or service agreement. This may include more detailed information about medical history, clinical assessments, biometric measurements, wearable data, personalised plans and ongoing service records.

2. Who We Are

For the purposes of UK data protection law, iWellness is the data controller responsible for personal information collected through this website.

Website: i-wellness.co.uk

Privacy contact email: contact@i-wellness.co.uk

ICO registration number: Not currently available

Any questions about this privacy policy or the way personal information is handled should be sent to the privacy contact email above.

3. Personal Information We May Collect

The personal information we collect depends on how you use the website.

Identity and contact information

This may include:

1. Your name

2. Your email address

3. Your telephone number

4. Your home address or service location

5. Your preferred method of contact

Enquiry and consultation information

When you submit an enquiry or request a consultation, we may collect:

1. The service you are interested in

2. Your preferred appointment dates or times

3. Information about your health and wellness goals

4. Questions or messages you submit

5. Records of our correspondence with you

6. Information needed to arrange a home visit or consultation

Health and wellness information

You may choose to provide information about your physical or mental health, medical history, medications, lifestyle, nutrition, exercise, sleep, emotional wellbeing or health goals.

Health information is classed as special category personal data and receives additional protection under data protection law.

We ask that you do not provide detailed medical information through a general website contact form unless it is necessary for your enquiry and the form clearly requests that information.

Where detailed health information is required, we may collect it through a more appropriate and secure process.

Biometric and wearable information

Where relevant to an enquiry or consultation, information may include data associated with:

1. Fitness trackers or wearable devices

2. Activity levels

3. Heart rate

4. Sleep patterns

5. Exercise performance

6. Body composition

7. Blood pressure

8. Oxygen saturation

9. Other health or wellness measurements

The website itself may not collect all of this information directly. Further information may be collected separately if you become a client and agree to participate in an assessment or personalised wellness service.

Booking and payment information

Where you make or arrange a payment connected with a consultation, we may collect:

1. Booking details

2. Payment status

3. Transaction references

4. Invoice details

5. The date and amount of a payment

Payments may be processed by a separate payment provider. We do not normally receive or store your complete payment card details.

Technical and usage information

When you use the website, certain technical information may be collected automatically, including:

1. Your Internet Protocol address

2. Browser type and version

3. Device type

4. Operating system

5. Approximate location derived from your Internet Protocol address

6. Pages visited

7. Time spent on the website

8. Referring website or search engine

9. Links and buttons used

10. Website errors and performance information

Cookie preference information

We may record:

1. Whether you accepted or rejected cookies

2. The cookie categories you selected

3. The date and time of your selection

4. An identifier used to remember your preferences

Marketing preferences

Where marketing options are provided, we may record whether you have agreed to receive communications and whether you later withdrew that agreement.

4. How We Collect Personal Information

We may collect personal information:

Directly from you

This includes information you provide when you:

1. Complete a website form

2. Request a consultation

3. Contact us by email or telephone

4. Make a booking

5. Arrange or make a payment

6. Respond to communications

7. Change your cookie preferences

Automatically through the website

Technical and usage information may be collected through cookies, server logs and similar technologies.

Through service providers

We may receive information from providers that support website hosting, forms, email delivery, appointment booking, payments, website security, analytics or technical maintenance.

5. How We Use Personal Information

We may use personal information for the following purposes.

To operate and maintain the website

We use technical information to provide the website, maintain its functionality, diagnose problems, protect it against misuse and improve its reliability.

Our lawful basis is our legitimate interest in operating a secure, functional and effective website.

To respond to enquiries

We use your contact details and enquiry information to respond to questions, provide information and discuss the services you are interested in.

Our lawful basis may be:

1. Taking steps at your request before entering into a contract

2. Our legitimate interest in responding to enquiries and communicating with potential clients

To arrange consultations and appointments

We use booking and contact information to arrange consultations, confirm appointments, communicate about bookings and provide relevant preparation information.

Our lawful basis is normally taking steps at your request before entering into a contract or performing a contract with you.

To process payments

We use transaction and payment information to process deposits, confirm payments, issue invoices, maintain financial records and prevent fraud.

Our lawful bases may include:

1. Performing a contract with you

2. Complying with legal and financial obligations

3. Our legitimate interest in preventing fraud and managing payments

To process health information

Where you provide health, medical, biometric or wellness information through the website, we will only process it where we have:

1. A lawful basis under Article 6 of the UK GDPR

2. A separate condition under Article 9 of the UK GDPR

Depending on the circumstances, the Article 6 lawful basis may be taking steps at your request before entering into a contract, performing a contract or your consent.

The Article 9 condition will normally be your explicit consent, unless another lawful condition applies and has been explained to you.

You may withdraw explicit consent by contacting us. Withdrawal will not affect processing that took place before consent was withdrawn. It may, however, affect our ability to respond to a health specific enquiry or provide a requested service.

To improve the website

Where permitted by law and your cookie choices, we may use website analytics to understand how visitors use the website, identify popular content and improve its design, navigation and performance.

For non essential analytics cookies, our lawful basis will normally be your consent.

To protect the website and our legal rights

We may use personal information to investigate suspicious activity, protect the website, establish or defend legal claims, enforce website terms and respond to lawful requests.

Our lawful bases may include legal obligation and our legitimate interests in protecting the website, preventing misuse and defending our legal rights.

To send marketing communications

We will only send electronic marketing where permitted by law.

Where consent is required, we will ask for it before sending marketing communications. You can withdraw your consent or unsubscribe at any time.

We will not use health information for unrelated marketing without your explicit consent.

6. Cookies and Similar Technologies

Cookies are small files that may be stored on your device when you visit a website. Similar technologies may include local storage, scripts, tags and tracking pixels.

The website uses a cookie consent banner to allow you to control non essential cookies.

Strictly necessary cookies

These cookies are required for the website to function properly. They may be used for:

1. Website security

2. Form functionality

3. Session management

4. Fraud prevention

5. Remembering cookie preferences

6. Load balancing and technical performance

Strictly necessary cookies do not normally require consent.

Preference cookies

These cookies remember choices you make, such as display preferences or website settings.

Where required, these cookies will only be used after you have given consent.

Analytics cookies

Analytics cookies help us understand how visitors use the website. They may collect information about pages visited, time spent on the website, traffic sources and technical performance.

Non essential analytics cookies will only be activated where you have provided consent through the cookie banner.

Marketing cookies

Marketing cookies may be used to measure advertising, understand campaign performance or display relevant content.

Marketing cookies will only be activated where you have provided consent.

External content

The website may include content provided by other websites, such as videos, maps, social media features, booking systems or payment tools.

These providers may place cookies or collect technical information when their content is loaded. Non essential external content should be blocked until the necessary consent has been provided.

Managing cookies

You can accept, reject or customise non essential cookies through the cookie banner.

You can change your preferences at any time using the cookie settings facility available on the website, where provided.

You can also control cookies through your browser settings. Blocking certain cookies may affect the way parts of the website function.

A current list of cookies, their providers, purposes and durations should be available through the cookie banner or associated cookie settings panel.

7. Sharing Personal Information

We may share personal information with trusted service providers where this is necessary to operate the website or respond to your request.

These providers may include:

1. Website hosting providers

2. Website designers and technical maintenance providers

3. Email and communication providers

4. Form and booking system providers

5. Payment processors

6. Analytics providers

7. Website security and fraud prevention providers

8. Data storage and backup providers

9. Professional advisers, including accountants, insurers and legal advisers

Service providers are only permitted to use personal information for the services they provide to us. Where required, they must protect the information and comply with appropriate contractual and data protection obligations.

We may also disclose personal information:

1. Where required by law

2. In response to a court order or lawful request

3. To protect someone’s vital interests

4. To investigate fraud, misuse or security incidents

5. To establish, exercise or defend legal claims

6. In connection with a sale, transfer or restructuring of the website or relevant operations

We do not sell personal information.

8. International Transfers

Some website service providers may store or access personal information outside the United Kingdom.

Where personal information is transferred outside the United Kingdom, we will take reasonable steps to ensure that the transfer is lawful and that appropriate protection is in place.

Depending on the destination and provider, this may include:

1. A country covered by UK adequacy regulations

2. The UK International Data Transfer Agreement

3. The UK Addendum to approved contractual clauses

4. Other appropriate safeguards permitted under UK data protection law

5. A lawful exception where appropriate

You may contact us for more information about the safeguards used for relevant international transfers.

9. How Long We Keep Personal Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

The appropriate period depends on the type of information, the reason it was collected and any legal, accounting, contractual or regulatory requirements.

We generally apply the following retention periods:

General website enquiries

General enquiries may normally be retained for up to 24 months after the last meaningful communication.

Consultation and booking information

Booking and appointment records may be retained for the duration of the enquiry or client relationship and for a reasonable period afterwards.

Financial records

Invoices, transaction records and payment information may normally be retained for up to six years after the end of the relevant financial year where required for tax, accounting or legal purposes.

Health information submitted through the website

Health information submitted with an initial enquiry will be kept only for as long as necessary to consider and respond to that enquiry.

Where you become a client, relevant information may be transferred into an appropriate client record and retained in accordance with a separate service or client retention policy.

Marketing information

Marketing preferences may be retained until you withdraw consent or unsubscribe. We may retain a minimal suppression record to ensure that we respect your request not to receive further marketing.

Technical information

Website security logs and technical records may normally be retained for up to 12 months, unless they are required for an ongoing security investigation or legal matter.

Cookie information

Cookie durations vary depending on their purpose. Details should be available through the website’s cookie settings facility.

Information may be kept for longer where this is necessary to investigate a complaint, respond to a legal claim, comply with a legal obligation or protect someone’s rights.

When information is no longer required, it will be deleted, anonymised or securely destroyed.

10. Data Security

We use reasonable technical and organisational measures to protect personal information against:

1. Unauthorised access

2. Accidental loss

3. Misuse

4. Alteration

5. Disclosure

6. Destruction

These measures may include access controls, secure hosting, encryption, password protection, software updates, backups, malware protection and restrictions on who can access personal information.

No method of sending information over the internet is completely secure. You should avoid including unnecessary or highly sensitive medical information in a general website message.

If we become aware of a personal data breach, we will investigate it and take appropriate action. Where legally required, we will notify the Information Commissioner’s Office and affected individuals.

11. Your Data Protection Rights

Depending on the circumstances and lawful basis used, you may have the following rights.

Right of access

You may request confirmation of whether we hold your personal information and ask for a copy of it.

Right to rectification

You may ask us to correct inaccurate or incomplete personal information.

Right to erasure

You may ask us to delete your personal information in certain circumstances.

Right to restrict processing

You may ask us to limit the way we use your personal information in certain circumstances.

Right to object

You have the right to object to processing based on legitimate interests.

We will consider your objection and stop the processing unless we have compelling legitimate grounds to continue or the processing is required for legal claims.

You have an absolute right to object to the use of your personal information for direct marketing.

Right to data portability

Where processing is based on consent or contract and carried out by automated means, you may have the right to receive information in a structured, commonly used and machine readable format.

Right to withdraw consent

Where we rely on your consent, you may withdraw it at any time.

Withdrawal does not affect the lawfulness of processing completed before consent was withdrawn.

Rights concerning automated decisions

You may have rights relating to decisions made solely through automated processing where those decisions have legal or similarly significant effects.

We do not currently use website information to make solely automated decisions that have legal or similarly significant effects.

These rights are not absolute and may not apply in every situation.

To exercise a right, email contact@i-wellness.co.uk. We may need to request information to confirm your identity before responding.

We will normally respond within one month. Where a request is complex or multiple requests have been made, the response period may be extended where permitted by law.

You will not normally be charged for exercising your rights. A reasonable fee may be charged, or a request may be refused, where it is manifestly unfounded or excessive.

12. Marketing Communications

You can ask us to stop sending marketing communications at any time by:

1. Using an unsubscribe option included in the communication

2. Emailing contact@i-wellness.co.uk

Stopping marketing communications will not prevent us from sending necessary messages about an enquiry, booking, payment, appointment or service you have requested.

13. Third Party Websites

The website may contain links to websites operated by other organisations.

We are not responsible for the privacy practices, security or content of external websites. When you follow an external link, you should review the privacy information provided by that website.

14. Information About Other People

If you provide personal information about another person, you must ensure that you have a lawful reason to do so and that the person understands how their information may be used.

You should not submit another person’s medical or health information without their knowledge and appropriate permission, unless there is a lawful reason for doing so.

15. Children’s Information

The website is primarily intended for adults.

We do not knowingly collect personal information from children through the website without appropriate permission.

Where a service may be provided to someone under 18, appropriate consent, parental responsibility and age appropriate privacy information will be considered before information is collected.

16. Complaints

If you have concerns about how your personal information has been handled, please contact us first so that we have an opportunity to investigate.

Email: contact@i-wellness.co.uk

You also have the right to complain to the Information Commissioner’s Office, which is the United Kingdom’s independent data protection regulator.

The Information Commissioner’s Office can be contacted through its website or by calling its helpline on 0303 123 1113.

17. Changes to This Policy

We may update this privacy policy when the website, services, technology or legal requirements change.

The latest version will be published on this page and the date at the top of the policy will be updated.

You should review this policy periodically to remain informed about how personal information collected through the website is handled.