Privacy Policy

Last Updated: September 2026

At B Health ("we", "our", "us"), your privacy is of the utmost importance. This Privacy Policy explains how we collect, use, store, and protect your personal information in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The Data Controller for this website and practice is Bindiya, founder of B-Health. If you have any questions regarding your data, how it is handled, or your legal rights, please contact us directly at info@bhealth.uk.

2. Information We Collect & Our Lawful Basis

We collect and process personal data under the following legal frameworks required by the UK GDPR:

  • Personal Data: Includes your name, email address, phone number, and basic contact details. Our lawful basis for processing this is Performance of a Contract (to deliver our services) or Legitimate Interests (to respond to your enquiries).

  • Special Category Data (Health Information): Includes health histories, lifestyle details, dietary logs, and wellness metrics for you or your children. Our lawful basis for processing this sensitive data is Article 9(2)(a) of the UK GDPR — Explicit Consent. You will be required to provide explicit consent via our intake documentation prior to any health evaluation.

  • Financial Data: Payments are processed securely via encrypted, PCI-DSS compliant third-party payment gateways (e.g., Stripe or PayPal). We do not store credit or debit card details on our systems.

3. How Your Information Is Used

Your information is used strictly to:

  • Respond to direct enquiries and schedule consultations.

  • Provide naturopathic wellness practitioner services and health coaching.

  • Prepare bespoke dietary, lifestyle, and supplement recommendations.

  • Process transactions securely and manage client accounts.

  • Satisfy UK professional indemnity insurance and legal obligations.

Your data will never be sold, rented, or shared with third parties for marketing purposes.

4. Data Protection and Third-Party Sharing

  • Data Security: All personal and health data is stored using encrypted, password-protected systems and secure cloud-based practice management software compliant with UK data protection standards. Access is strictly restricted to authorised personnel.

  • Data Processors: We may share necessary data with trusted software providers who assist in operating our practice (e.g., secure scheduling systems, video platforms, or secure email services). These providers act as Data Processors bound by legal Data Processing Agreements to safeguard your information.

5. Children's Data & Special Retention Safeguards

Because we offer nutritional support for children and teenagers under 18 years of age, we apply strict safeguarding protocols:

  • Parental Consent: We never knowingly collect or process data from a minor without the explicit written consent of their parent or legal guardian.

  • Data Retention:

    • Adult Clients: We retain records for 7 years following the conclusion of services to comply with professional insurance mandates.

    • Minor Clients: In accordance with UK clinical record guidance and insurance requirements, records for minors are securely retained until the individual reaches 26 years of age (8 years after their 18th birthday), or 7 years after the conclusion of care, whichever is longer. Following this period, data is permanently and securely destroyed.

6. Your Legal Rights Under the UK GDPR

Under the UK GDPR, you hold specific rights regarding your personal information:

  • Right of Access: You may request copies of the personal data held about you by submitting a Subject Access Request (SAR).

  • Right to Rectification: You can ask us to correct inaccurate or incomplete details.

  • Right to Erasure ('Right to be Forgotten'): You may request the deletion of your data. (Note: This is subject to statutory exemptions where retention is mandated by law or professional insurance policies).

  • Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time.

To exercise any of these rights, please contact info@bhealth.uk. We will respond to your request within one calendar month free of charge.

7. Cookies and Third-Party Links

Our website may use essential cookies to ensure standard site functionality and analytics to monitor traffic patterns. External links provided on our website to third-party sites are governed by their respective privacy policies, for which we hold no responsibility.

8. Lodging a Complaint

If you have concerns about how your data is handled, we ask that you contact us first to resolve the issue. However, you maintain the legal right to lodge a formal complaint at any time with the UK supervisory authority:

  • Information Commissioner’s Office (ICO)

  • Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

  • Helpline: 0303 123 1113

  • Website: https://ico.org.uk