1. Who we are

 

This privacy policy explains how AB Health and Wellness, trading as AB Health Hub ("we", "us", "our"), collects, uses and protects your personal information when you visit our website, contact us, book a service or buy from us.

We are the data controller for your personal information. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

 

Contact details

​

• Business name: AB Health and Wellness, trading as AB Health Hub

• Address: The Port House, 11 Exchange Street Jedburgh

• Email: bookings@abhealthhub.com

• Phone: 0333 335 0044

• ICO registration number: ZB174956

 

If you have any questions about this policy or how we handle your information, please contact us using the details above.

​

2. Information we collect

We only collect the personal information we need. Depending on how you use our website, this may include:

• Identity and contact details: your name, email address, phone number and postal or delivery address.

• Order and payment details: the products or services you buy, order history and billing address. Card payments are handled by our payment providers; we do not see or store your full card details.

• Account details: your login details and preferences if you create an account on our site.

• Communications: messages you send us through contact forms, email, live chat or social media.

• Health and wellbeing information: if you book a consultation or service, you may choose to tell us about your health, goals, allergies or medical conditions so we can support you safely. This is "special category" data and we only collect it with your explicit consent.

• Technical data: your IP address, browser type, device type, operating system, pages visited and the time and date of your visit.

• Marketing preferences: whether you have agreed to receive our newsletter or offers.

• ​

3. How we collect your information

 

We collect information in the following ways:

​

• Directly from you when you fill in a contact form, sign up to our newsletter, create an account, book an appointment, complete an intake or consultation form, make a purchase, leave a review or contact us by email, phone or social media.

• Automatically when you browse our website, through cookies and similar technologies (see section 7).

• From third parties such as our payment providers (to confirm a payment) and delivery companies (to confirm a delivery).

• ​

4. Why we use your information

 

UK data protection law requires us to have a lawful basis for each way we use your information. We use it for these purposes:

 

Purpose

Lawful basis

Processing and delivering your orders, including shipping and returns

Performance of a contract

Taking payment and preventing fraud

Performance of a contract; legitimate interests

Booking and providing appointments, consultations or wellness services

Performance of a contract

Using health information you share to tailor services safely

Explicit consent

Answering enquiries and providing customer and technical support

Legitimate interests; performance of a contract

Sending our newsletter and marketing emails

Consent (or, for existing customers, our legitimate interests under the PECR "soft opt-in")

Running, securing and improving our website, including analytics

Legitimate interests; consent for non-essential cookies

Keeping accounting and tax records

Legal obligation

 

You can opt out of marketing at any time using the "unsubscribe" link in any email or by contacting us. We will never sell your personal information.

​

5. How we store and share your information

 

Storage and security. Our website is hosted on the Wix.com platform. Your information is stored on Wix's secure servers, which use industry-standard protections including encryption (SSL/TLS), firewalls and access controls. We limit access to your information to people who need it to run our business, and we keep any health information you share confidential.

 

Who we share it with.

 

We share your information only where needed, with trusted service providers who act on our instructions and must keep it secure:

​

• Wix.com – website hosting, forms, bookings, online store and email marketing tools

• Payment providers – such as [Wix Payments / Stripe / PayPal] to process payments

• Delivery companies – such as [Royal Mail / courier name] to deliver your orders

• Analytics providers – such as [Google Analytics], if you accept analytics cookies

• Professional advisers – such as our accountant, where needed

 

We may also share information if required by law, for example with HMRC, the police or a court.

International transfers. Some of our service providers, including Wix, may store or process data outside the UK (for example in the European Economic Area, Israel or the United States). Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK–US Data Bridge, or the UK International Data Transfer Agreement or Addendum.

​

6. How long we keep your information

 

We keep personal information only for as long as we need it:

​

• Orders and payment records: 6 years from the end of the financial year, to meet HMRC requirements.

• Client and consultation records (including health information): [X years] after your last appointment, unless you ask us to delete them sooner and we have no legal reason to keep them.

• Enquiries: up to 2 years after our last contact.

• Marketing list: until you unsubscribe or withdraw consent.

 

After this, we securely delete or anonymise your information.

​

7. Cookies and tracking

 

Cookies are small text files placed on your device when you visit a website. Our website uses cookies and similar technologies, which fall into these types:

​

• Essential cookies: needed for the site to work, for example to keep items in your basket, keep you logged in and keep the site secure. These do not need your consent.

• Analytics cookies: help us understand how visitors use our site (such as pages visited and time spent) so we can improve it.

• Marketing cookies: used to measure our advertising and show you relevant ads, for example through Facebook/Meta Pixel or Google Ads, if we use them.

 

We only set analytics and marketing cookies if you agree through our cookie banner. You can change your choice at any time using the cookie settings link in our website footer, or by adjusting your browser settings. Blocking some cookies may affect how the site works.

 

For details of the cookies Wix uses, see Wix's cookie information: https://support.wix.com/en/article/cookies-and-your-wix-site

​

8. Your rights and withdrawing consent

 

Under UK data protection law you have the right to:

​

• Access – ask for a copy of the personal information we hold about you.

• Rectification – ask us to correct information that is wrong or incomplete.

• Erasure – ask us to delete your information ("the right to be forgotten").

• Restriction – ask us to limit how we use your information.

• Object – object to us using your information based on legitimate interests, and to direct marketing at any time.

• Data portability – ask us to send your information to you or another organisation in a commonly used format.

• Withdraw consent – where we rely on your consent, you can withdraw it at any time. This does not affect anything we did before you withdrew it.

 

How to withdraw consent or ask us to delete your data

​

• Marketing emails: click "unsubscribe" at the bottom of any email.

• Cookies: use the cookie settings link in our website footer.

• Anything else: email us at [your email address] with "Data request" in the subject line, telling us what you would like us to do.

We may ask you to confirm your identity before acting on a request. We will respond within one month, free of charge. If a request is complex, we may extend this by up to two further months and will tell you why. Sometimes we may need to keep certain information, for example order records required by law.

​

9. Complaints

If you are unhappy with how we have handled your personal information, please contact us first at [your email address] with "Data protection complaint" in the subject line. We will acknowledge your complaint within 30 days, look into it without undue delay, and tell you the outcome.

If you are still not satisfied, you have the right to complain to the UK data protection regulator, the Information Commissioner's Office (ICO):

• Website: ico.org.uk/make-a-complaint

• Helpline: 0303 123 1113

​

10. Children

Our website and services are not aimed at children under 13, and we do not knowingly collect their personal information. If you are under 18, please get a parent or guardian's permission before sharing any information with us.

​

11. Links to other websites

Our website may link to other sites, such as social media pages. We are not responsible for how those sites handle your information, so please read their privacy policies.

​

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top. If we make significant changes, we will let you know by email or a notice on our website.