Data Privacy Notice

Effective Date: 31/12/2025

At Hales Health, we are committed to protecting your privacy and ensuring that your personal data is handled securely and transparently. This notice explains how we collect, use, and store your information when you interact with our website.

1. What Data We Collect

When you use our website, we may collect the following information:

• Your name
• Contact details (such as email address and phone number)
• Any information you provide through our contact or booking forms

2. How We Use Your Data

• General Website Enquiries:
  If you submit an enquiry through our website, your data will only be used to respond to your request via email. We do not store this information beyond what is necessary to address your enquiry.
• Clients Using Our Booking System:
  If you become a client and use our booking services, your data will be securely stored and managed through our IONOS booking system application. This is necessary to provide you with appointment scheduling and related services.

3. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your information is only used for the purposes stated above.

4. Data Retention

• Enquiry data is retained only for as long as necessary to respond to your request.
• Client data within the IONOS booking system is retained in accordance with legal and operational requirements operated by IONOS.

5. Your Rights

You have the right to:

• Request access to the personal data we hold about you
• Request correction or deletion of your data
• Withdraw consent for processing (where applicable)

To exercise these rights, please contact us at:
Email: simon@hales-health.com

6. Security

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

7. Updates to This Notice

We may update this notice from time to time. The latest version will always be available on our website.

Would you like me to add GDPR compliance language (including lawful basis for processing and ICO contact details) to make it fully compliant for UK regulations? Or should I keep it simple and user-friendly for your website?