Privacy Policy

Last updated: August 2026

This Privacy Policy explains how Delamere Thrive ("we", "us", "our") collects, uses and protects your personal information when you use our website, contact us, or attend a consultation or session with us. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA).

1. Who We Are (Data Controller)

Registered in England and Wales, company number 17330231.

Email: hello@delamerethrive.com
Phone: 01606 531565

We are the data controller responsible for your personal information.

2. What Information We Collect

Information you provide directly

When you contact us through our website forms, email or phone, book a session, or attend a consultation, we may collect:

• Name
• Email address
• Phone number
• Booking and enquiry details
• Any other information you choose to provide

Health information (special category data)

For health and other special-category information, we rely on your explicit consent under Article 9(2)(a) UK GDPR where appropriate. This consent is requested separately and specifically in relation to the health information needed for consultation, screening and therapy suitability.

Automatically collected data

When you visit our website, we may collect:

• IP address
• Browser type and device information
• Pages visited and time spent on the site
• Cookies and tracking data (see section 8)

Google reCAPTCHA

We use Google reCAPTCHA to protect our forms from spam and abuse. reCAPTCHA may collect:

• IP address
• Browser and device information
• Behavioural data (e.g. mouse movements)

This is processed under Google's Privacy Policy and Terms of Service.

3. How We Use Your Information

We use your personal data to:

• Respond to enquiries and provide customer support
• Provide information about our therapies, packages and services
• Manage bookings, consultations and sessions
• Assess whether a therapy or session is suitable and safe for you, and keep appropriate records of your consultations and sessions
• Improve our website and user experience
• Protect our website from spam and malicious activity (via reCAPTCHA)
• Comply with legal obligations

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

For general personal data, we rely on:

• Legitimate interests - responding to enquiries, running our business, improving our services
• Contract - when you book a session
• Legal obligation - where required for legal or regulatory purposes
• Consent - where you opt in to receive marketing emails

For health (special category) information, we additionally rely on your explicit consent, and where relevant the "provision of health care or treatment" basis under UK GDPR Article 9(2)(h), so that we can assess suitability and deliver sessions safely. You can withdraw your consent at any time, although this may mean we are unable to offer certain sessions.

5. How Long We Keep Your Data

We keep your information only for as long as necessary:

• Enquiry data: up to 12 months
• Booking, consultation and session records: up to 7 years (for accounting, insurance and legal purposes)
• Marketing consent data: until you unsubscribe
• Website logs and analytics: typically 12-26 months, depending on the tool

After this, data is securely deleted or anonymised.

6. Sharing Your Information

We do not sell or share your personal data with third parties for marketing. We may share data with:

• Service providers (e.g. website hosting, email, and our booking system, Fresha)
• Google (via reCAPTCHA)
• Professional advisers (e.g. accountants and insurers)
• Authorities where legally required

All third-party processors are required to handle your data in line with UK GDPR.

7. International Data Transfers

Some of the service providers we use may store or process data outside the United Kingdom. For example, Google reCAPTCHA and certain hosting, booking or analytics tools may process data on servers located in other countries, including the United States.

Where personal data is transferred outside the UK, we take steps to ensure it remains protected to a standard consistent with UK GDPR - for example through the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or by relying on countries that have been granted UK "adequacy" status. If you would like more information about the safeguards we have in place, please contact us at hello@delamerethrive.com.

8. Cookies & Tracking Technologies

Cookie Banner (CookieYes)

When you first visit our website, you will see a CookieYes consent banner. This allows you to:

• Accept all cookies
• Reject non-essential cookies
• Manage your cookie preferences at any time

Your choices are stored and respected in line with UK GDPR requirements.

Types of cookies we use

• Strictly necessary cookies - required for the website to function
• Performance/analytics cookies - help us understand how visitors use the site
• Functionality cookies - improve your browsing experience
• Security cookies - used by Google reCAPTCHA to prevent spam

You can change or withdraw your consent at any time via the cookie settings link on our site or through your browser settings.

9. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Object to or restrict processing
• Withdraw consent (where applicable)
• Request data portability

To exercise your rights, contact us at hello@delamerethrive.com. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

10. Security

We take appropriate technical and organisational measures to protect your data, including secure servers, encryption where appropriate, and restricted access.

11. Children and Young People

Our services and website are not designed to collect personal information from children without appropriate involvement of a parent or guardian. If Delamere Thrive intends to provide services directly to under-18s, a separate review of consent, safeguarding and privacy arrangements should be completed before doing so.

12. Links to Other Websites

Our website may contain links to external sites. We are not responsible for their privacy practices or content.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: