Privacy Policy

This Privacy Policy explains how heath-trek collects, uses, stores, and protects personal data when you interact with our website and services. We are committed to handling your information responsibly and in compliance with applicable data protection legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018.

Data Controller

Heath-trek is the data controller for personal information collected through this website. Our contact details are:

47 Greenway Business Centre
Hampstead, London NW3 2PT
United Kingdom
Email: [email protected]

Information We Collect

We collect personal information that you provide directly to us, including:

• Name and contact details when you submit an enquiry form
• Organisation name and role if provided
• Content of messages you send to us
• Email correspondence records

We also collect certain information automatically when you visit our website:

• IP address and browser type
• Pages visited and time spent on each page
• Referring website address
• Device information

How We Use Your Information

We process personal data for the following purposes:

• Responding to enquiries and providing requested information
• Delivering consulting services to clients
• Improving our website and user experience
• Complying with legal and regulatory obligations
• Maintaining records of business communications

Legal Basis for Processing

We process personal data on the following legal grounds:

• Consent: Where you have provided explicit consent for specific processing activities
• Contract: Where processing is necessary to fulfil a contract with you or take pre-contractual steps at your request
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal obligation: Where processing is required to comply with applicable law

Data Sharing

We do not sell personal information to third parties. We may share data with:

• Service providers who assist with website hosting and analytics
• Professional advisers such as accountants and legal counsel
• Regulatory bodies when required by law

Any third parties with whom we share data are required to handle it securely and only for specified purposes.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected. Enquiry records are typically kept for three years after the last communication. Client project records are retained for seven years following project completion in accordance with professional obligations.

Your Rights

Under data protection law, you have rights including:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request limitation of processing in certain circumstances
• Portability: Request transfer of data to another organisation
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, please contact us using the details provided above.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. This includes secure storage systems, access controls, and staff training on data protection responsibilities.

International Transfers

We primarily process data within the United Kingdom. If data is transferred outside the UK, we ensure appropriate safeguards are in place as required by data protection law.

Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated through our website. The date at the bottom of this page indicates when the policy was last revised.

Complaints

If you have concerns about how we handle your personal data, please contact us first so we can address your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

Last updated: September 2024