Privacy Notice – The Breath Clinic

Who we are (data controller)

The Breath Clinic (“we”, “us”) is the data controller for the personal data we process.

Data Protection Lead: Helen O'NEILL
Email: info@thebreathclinic.com
Address: [add your postal address]
Phone: [add your phone number]

Personal data we collect

Contact & booking data: name, email, phone, appointment details, and the message you send us through forms or email.

Client/treatment data (if you become a client): information you provide during assessment and treatment.

Payments: handled by our payment provider; we do not store full card details.

Website & technical data: IP address, device/browser info, and cookies (see Cookie Policy below).

Sources: you (directly), people contacting us on your behalf (with permission), our booking/payment systems, and website analytics (only after consent).

How we use your data and our lawful bases (UK GDPR Art. 6)

Responding to enquiries and making bookings – legitimate interests and/or contract.

Providing assessment/treatment and aftercare – contract.

Running, securing and improving our website – legitimate interests (only essential cookies without consent).

Legal, insurance, tax and accounting – legal obligation.

Marketing by email/SMS (only if you opt in, or where permitted by law) – consent; you can withdraw at any time.

Special category (health) data

Where we provide health-related services, we may process health information under UK GDPR Article 9(2)(h) (health or social care). Where required, we maintain an Appropriate Policy Document under the Data Protection Act 2018. If a different purpose applies, we will ask for your explicit consent before processing special category data.

Who we share your data with

We use trusted service providers acting under contract, such as:

website hosting/maintenance (e.g., IONOS),

booking and payment platforms,

email and IT service providers,

secure record storage,

professional advisers and insurers where needed.
We do not sell your personal data.

International transfers

If any provider stores data outside the UK, we use appropriate safeguards (e.g., the UK IDTA or the UK Addendum to EU SCCs). Details are available on request.

How long we keep your data

We keep data only as long as necessary for the purposes above, then securely delete or anonymise it. Typical periods:

Enquiries (no booking): [e.g., 12 months].

Client records: [insert your profession/insurer requirement, e.g., 8 years after last contact].

Your rights

You can request access, correction, erasure, restriction, objection, and data portability. Where we rely on consent, you can withdraw consent at any time. To exercise your rights, email info@thebreathclinic.com.

How to complain

Please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Children

Our services are [not directed to children / may be provided to children with parental involvement — choose one]. We obtain appropriate permissions where required.

Automated decision-making

We do not use automated decision-making that produces legal or similarly significant effects.

Third-party links

Our site may link to other websites; their privacy statements apply.

Changes to this notice

We may update this notice and will post the new version here.
Last updated: 18 September 2025.

Cookie Policy – The Breath Clinic

About cookies

Cookies are small files placed on your device. We use essential cookies to make this site work. We will only set analytics cookies if you choose “Accept” on our cookie banner. You can change your choice any time via [Cookie Settings].

Cookies we use

Essential (always on)
Required for core site functions such as security and remembering your cookie choices. These do not require consent.

Analytics (set only after you accept)
We use Google Analytics 4 (GA4) to understand how visitors use our site so we can improve it. These cookies help count visits and see which pages are most popular. We do not use analytics for ads or to identify you directly.

_ga (Google) – distinguishes visitors – expires in up to 2 years.

ga[container-ID] (Google) – stores session/visit data – expires in up to 2 years.

_gid (Google) – counts pageviews per day – expires in ~24 hours.

We won’t set analytics cookies until you Accept. You can withdraw consent at any time in [Cookie Settings]; we’ll stop using optional cookies after you do.

Managing cookies

Most browsers let you block or delete cookies. If you block essential cookies, parts of the site may not work properly.

Contact about cookies

Email: info@thebreathclinic.com
Last updated: 18 September 2025.