Privacy Policy

1. Who We Are

Heal & Go ("we", "our", "us") operates the website healandgo.co.uk and provides medical-grade Hyperbaric Oxygen Therapy (HBOT) services across the United Kingdom, delivered within a clinically governed framework aligned to UK regulatory standards. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any data protection queries, please contact us at: info@healandgo.co.uk

2. What Data We Collect

We may collect and process the following personal data:

• Identity data: Full name, professional title (if applicable)
• Contact data: Email address, telephone number
• Enquiry data: The contents of messages you send us via our contact form, email or phone
• Professional data: Practice details, professional qualifications (for healthcare practitioners registering interest in our programme)
• Technical data: Limited server logs (IP address, request time, page requested) generated automatically when you visit the site. We do not currently use any web analytics product.

3. How We Collect Your Data

We collect data when you:

• Submit an enquiry via our contact form
• Email or phone us directly
• Register interest in our practitioner or affiliate programme
• Sign in to a practitioner or admin account (a session cookie is set so you stay signed in)
• Choose to load an embedded map or video, which is delivered by a third party

4. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide information about our services
• To process practitioner and affiliate programme registrations
• To send you relevant updates about services, locations and availability (only with your consent)
• To keep the website secure and operating correctly
• To comply with legal obligations

We will only send you marketing communications if you have given explicit consent. You can withdraw consent at any time.

5. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: Where you have given us clear consent to process your data for a specific purpose (e.g. receiving updates, loading third-party embeds)
• Legitimate interests: Where processing is necessary for our legitimate business interests (e.g. responding to enquiries, keeping the service running), provided these do not override your rights
• Legal obligation: Where we need to comply with a legal requirement

6. Data Sharing

We do not sell your personal data to third parties. We may share your data with:

• Service providers who help us operate the website (e.g. our hosting provider, and email infrastructure if and when email sending is enabled). These providers are bound by data processing agreements.
• Professional advisors (e.g. legal, accounting) where necessary
• Law enforcement or regulatory bodies where required by law

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is typically retained for 24 months. You may request deletion of your data at any time.

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@healandgo.co.uk. We will respond within one month.

9. Cookies and Similar Technologies

We keep cookies to a minimum. Specifically:

• Strictly necessary (always on): A session cookie set when you sign in to a practitioner or admin account, so you stay signed in. Without it the login flow does not work. We also store a small flag in your browser's local storage to remember your cookie consent choice on this site.
• Third-party embeds (only if you accept): Some pages, currently the Locations page, include embedded content such as Google Maps. These embeds are not loaded until you accept on the cookie banner shown on that page, or click to load them directly. Once loaded, the third party may set its own cookies on its own domain (for example Google for Maps, or YouTube/Vimeo for video). We do not control these cookies; please refer to the relevant provider's privacy policy.
• Analytics: We do not currently run any web analytics, advertising or tracking pixels.

You can change your choice at any time by clearing your browser's site data for healandgo.co.uk, which will trigger the consent banner again on your next visit. You can also block or delete cookies in your browser settings.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet is 100% secure.

11. Children's Data

Our services and website are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact & Complaints

If you have questions or concerns about this privacy policy or our data practices, please contact:

Heal & Go
Email: info@healandgo.co.uk

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ico.org.uk | Helpline: 0303 123 1113