This Privacy Policy explains how Your Ayurveda Ltd ("we", "us", "our") collects, uses, stores and protects your personal data when you visit our website, contact us, or receive treatments from us. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Your Ayurveda Ltd is the data controller responsible for your personal data.
The information we collect
Information you give us
- Enquiry and booking details — when you complete our contact form or contact us by phone or email, we collect your name, email address, phone number, the treatment you are interested in, and any information you include in your message.
- Health information — before treatment we ask about relevant medical conditions, injuries, allergies and sensitivities so that treatment can be delivered safely. Health data is "special category" data and is treated with extra care.
- Payment information — when you purchase a gift voucher or pay for a treatment, payment is processed securely by our payment provider. We do not see or store your full card details.
Information we collect automatically
- Website usage data — like most websites, we use analytics to understand how visitors use our site (for example pages visited, approximate location, device and browser type). This is collected through cookies and similar technologies. See "Cookies and analytics" below.
How we use your information, and our lawful basis
- To respond to your enquiry and arrange your treatment — lawful basis: to take steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.
- To deliver treatments safely — where we process health information, our lawful basis is your explicit consent, and the provision of health care. You may withdraw consent at any time, though this may mean we are unable to treat you safely.
- To process payments — lawful basis: performance of our contract with you.
- To improve our website and services — lawful basis: your consent (for analytics cookies) and our legitimate interest in understanding how our website is used.
- To meet legal and regulatory obligations — for example keeping financial records.
Cookies and analytics
We use Google Analytics to help us understand how visitors use our website so we can improve it. Google Analytics sets cookies that collect information such as the pages you visit and how long you spend on the site. This information is aggregated and does not directly identify you. Analytics data may be processed by Google on our behalf.
You can control or delete cookies through your browser settings, and you can opt out of Google Analytics using Google's opt-out browser add-on. Essential cookies needed for the website to function do not require consent.
Who we share your information with
We do not sell your personal data. We only share it with trusted service providers who help us run our business, and only as far as necessary:
- Our website host and enquiry-form provider — to run the website and securely deliver your enquiry to us.
- Our email provider — to send and receive correspondence with you.
- Our payment provider — to process gift voucher and treatment payments securely.
- Google Analytics — to provide website usage statistics.
- Professional advisers and authorities — where we are required to do so by law.
Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK-approved data transfer mechanisms) to protect your information.
How long we keep your information
We keep your personal data only for as long as necessary for the purposes set out in this policy. Enquiry correspondence is kept while we are in contact and for a reasonable period afterwards. Client treatment and health records are kept for the period required by our professional and insurance obligations. Financial records are kept for at least six years as required by UK law. When data is no longer needed, we securely delete or anonymise it.
How we protect your information
We take appropriate technical and organisational measures to keep your personal data secure and to prevent unauthorised access, loss or misuse. Access to your information is limited to those who need it to provide our services.
Your rights
Under UK GDPR you have the right to:
- Be informed about how your data is used (this policy).
- Access the personal data we hold about you.
- Request that inaccurate data is corrected.
- Request that your data is erased, where there is no overriding reason to keep it.
- Restrict or object to how we use your data.
- Request a copy of your data in a portable format.
- Withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, please contact us at hello@yourayurveda.co.uk. We will respond within one month.
Complaints
If you have any concerns about how we handle your data, please contact us first so we can put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a revised date. Please check back periodically to stay informed.
Contact us
For any questions about this Privacy Policy or your personal data, contact us at hello@yourayurveda.co.uk. We aim to respond within 24 hours.