Privacy Policy

Who We Are

Data Controller: Laura Pilbeam trading as The Health Studio
Address: [Your Business Address], UK
Email: [email protected]
Website: www.thehealthstudio.co.uk

What Data We Collect

We collect personal data in the following ways:

Data You Provide Directly

• Name and email address when you download our free eBook (Fuel Your Focus) or sign up to our mailing list
• Name, email address, billing information, and any health information you choose to share when you purchase The Energy Evolution Method course or a 1:1 coaching package
• Health background, goals, and lifestyle information you provide during onboarding or coaching sessions
• Blood panel or phlebotomy appointment details, including relevant medical and contact information, when you book a clinic appointment
• Payment details processed via our third-party payment provider (we do not store card details directly)
• Any communications you send us via email, social media, or contact forms

Data Collected Automatically

• Technical data such as IP address, browser type, device information, and pages visited, collected via cookies and analytics tools when you use our website
• Purchasing and browsing behaviour on our website

How We Use Your Data

We use your personal data for the following purposes:

• To deliver the products and services you have purchased, including course access, coaching sessions, and clinic appointments
• To send you the Fuel Your Focus eBook and any follow-up email sequences you have opted into
• To send you marketing emails, newsletters, and updates about our products and services — you can unsubscribe at any time
• To process payments and manage your account
• To respond to your enquiries and provide customer support
• To improve our website, products, and services using aggregated analytics
• To comply with our legal and regulatory obligations

We will never sell your data to third parties. We do not use your data for automated decision-making or profiling.

Our Legal Basis for Processing

We process your data under the following legal bases:

• Contract: where processing is necessary to fulfil a purchase or service agreement with you
• Legitimate interests: to manage and grow our business, improve our services, and communicate with you about relevant products — balanced against your rights
• Consent: where you have actively opted in to receive marketing emails or download our free content
• Legal obligation: where we are required to retain records for tax, accounting, or regulatory purposes

Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Special Category Data (Health Information)

Some of our services involve the collection and processing of health-related information, including nutritional goals, symptoms, medication use (such as GLP-1 medications), and blood test results. This is classed as special category data under UK GDPR.

We process this data only with your explicit consent, which we will request separately before any health information is collected. You may withdraw this consent at any time, though this may affect our ability to deliver certain services.

Health data is stored securely and is never shared with third parties except where required to deliver the service (for example, a partnering laboratory for blood panel processing).

Who We Share Your Data With

We work with a small number of trusted third-party service providers who process data on our behalf. These include:

• Email marketing platforms (such as Flodesk, Mailchimp, or equivalent) to manage our subscriber list and deliver email sequences
• Course hosting platforms (such as Kajabi, Teachable, or equivalent) to deliver The Energy Evolution Method
• Payment processors (such as Stripe or PayPal) to securely handle transactions
• Website analytics tools (such as Google Analytics) to understand website performance
• Booking and scheduling tools (such as Calendly or equivalent) for appointment management
• Laboratories or phlebotomy partners for the processing of blood samples, where applicable

All third-party providers are required to handle your data in accordance with UK GDPR and are bound by data processing agreements. We do not permit them to use your data for their own marketing purposes.

International Data Transfers

Some of our third-party service providers may be based outside the UK or European Economic Area (EEA). Where this is the case, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses or the UK International Data Transfer Agreement — to protect your data to the same standard it would receive under UK law.

How Long We Keep Your Data

• Email subscriber data is retained for as long as you remain on our mailing list. You can unsubscribe at any time.
• Customer purchase records are retained for 7 years in line with HMRC requirements
• Coaching client records, including health information, are retained for 7 years from the end of the engagement
• Blood panel and clinic records are retained for 8 years in line with NHS recommended retention periods for clinical records
• Website analytics data is retained in aggregated, anonymised form and subject to the retention policies of our analytics provider

Where data is no longer needed, it is securely deleted or anonymised.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: you can request a copy of the data we hold about you
• Right to rectification: you can ask us to correct any inaccurate or incomplete data
• Right to erasure: you can ask us to delete your data in certain circumstances
• Right to restriction: you can ask us to limit how we use your data
• Right to data portability: you can ask us to provide your data in a machine-readable format
• Right to object: you can object to us processing your data for direct marketing or on the basis of legitimate interests
• Rights related to automated decision-making: we do not carry out automated decision-making, but you have the right to flag any concerns

To exercise any of these rights, please email us at [email protected]. We will respond within one month. There is no charge for making a request.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

Cookies

Our website uses cookies to improve your experience and help us understand how visitors use the site. Cookies are small files stored on your device.

• Essential cookies: necessary for the website to function correctly
• Analytics cookies: to track visitor behaviour and improve website performance (e.g. Google Analytics)
• Marketing cookies: where relevant, to track the effectiveness of any paid advertising

You can manage or disable cookies through your browser settings at any time. Disabling certain cookies may affect website functionality. Where required by law, we will request your consent before setting non-essential cookies.

Data Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include secure hosting, encrypted payment processing, and restricted access to personal data within our business.

No method of transmission over the internet is completely secure. If you have concerns about the security of your data, please contact us.

Children’s Data

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, data practices, or legal requirements. The most current version will always be available on our website, and we will update the date at the top of this document accordingly.

If we make significant changes that affect how we use your data, we will notify you by email where we have a valid address for you.