Privacy policy

Disclaimer: Please note that Heaven Rose Health is currently operating as a trial initiative and does not have a registered company ID at this time. This website and its associated services have been developed to explore the potential of our offerings and gather feedback from users. While we are committed to providing accurate, helpful, and professional guidance, please be aware that the services provided on this platform are for informational and supportive purposes only. We appreciate your understanding and support as we work to refine and formalise our business. Thank you for being part of our journey!

Privacy Policy for Heaven Rose Health

Effective Date: 25/05/25

At Heaven Rose Health, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in compliance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We may collect the following types of information when you interact with our services:

 1.1 Personal Information:
- Name
- Email address
- Phone number
- Postal address
- Payment details (e.g., credit/debit card information)

1.2 Health-Related Information:
- Medical history or conditions (if provided during consultations)
- Health goals or concerns

1.3 Technical Information:

- IP address
- Browser type and version
- Pages visited on our website
- Cookies and similar tracking technologies

1.4 Other Information:
- Feedback or testimonials
- Communication preferences   

2. How We Use Your Information

We use your information for the following purposes:

2.1 To Provide Our Services:
- Deliver personalised health guidance and general support.
- Process payments and manage bookings.
- Respond to inquiries or requests. 

2.2 To Improve Our Services:
- Analyse usage patterns to enhance user experience.
- Develop new features or offerings based on feedback. 

2.3 For Legal and Safety Purposes:
- Comply with applicable laws and regulations.
- Protect against fraud, misuse, or unauthorised access.

2.4 For Marketing (with Consent):
- Send promotional materials about our services (only if you opt-in).
- Conduct surveys or gather feedback to improve our offerings.  

3. Legal Basis for Processing Your Data

Under UK GDPR, we process your personal data only where we have a lawful basis to do so. These include:
- Consent: You have explicitly agreed to share your data for specific purposes (e.g., receiving newsletters).
- Contractual Necessity: Processing is necessary to fulfil our agreement with you (e.g., delivering paid services).
- Legitimate Interests: We may process your data for legitimate business purposes (e.g., improving our services), provided it does not override your rights.
- Legal Obligation: We may process your data to comply with legal requirements (e.g., tax reporting).

4. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. However, we may share your data in the following circumstances:
4.1 With Service Providers:
- Trusted partners who assist us in operating our business (e.g., payment processors, IT support). These entities are bound by confidentiality agreements.
4.2 For Legal Reasons:
- To comply with court orders, government requests, or applicable laws.
- To enforce our Terms and Conditions or protect our rights.
4.3 With Your Consent:
- Any other sharing will occur only with your explicit consent.

5. Data Security

We take reasonable measures to safeguard your personal information from unauthorised access, loss, or misuse. These measures include:
- Encryption of sensitive data.
- Secure servers and firewalls.
- Regular staff training on data protection practices.
However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You agree to this when using our services. You reserve the right not to provide accurate and complete information during consultations or when using our services. You are responsible for maintaining the confidentiality of your account and for all activities that occur under your account. Misusing or sharing, recording information may result in termination of service.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:
6.1 Right to Access:
Request a copy of the personal data we hold about you. 

6.2 Right to Rectification:
Ask us to correct any inaccurate or incomplete information. 

6.3 Right to Erasure (Right to be Forgotten):
Request deletion of your data, subject to certain exceptions.

6.4 Right to Restrict Processing:
Limit how we use your data in specific circumstances. 

6.5 Right to Data Portability:
Obtain your data in a structured, machine-readable format for transfer to another service provider. 

6.6 Right to Object:
Opt out of processing for direct marketing or legitimate interests. 

To exercise these rights, please contact us using the details below. We will respond within one month, as required by law.

7. Retention of Your Data

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
For example:
- Payment records may be retained for up to 6 years for tax purposes.
- Health-related data will be deleted upon request, unless retention is required for ongoing support.  

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience.
8.1 Types of Cookies:
- Essential Cookies: Necessary for the website to function properly.
- Analytics Cookies: Help us analyze traffic and improve performance.
- Marketing Cookies: Used to deliver personalized ads (if applicable). 

8.2 Managing Cookies:
You can adjust your browser settings to block or delete cookies. However, disabling essential cookies may affect website functionality.

9. Third-Party Links

Our website may contain links to third-party sites (e.g., health resources, partner organisations). We are not responsible for their privacy practices or content. Please review their policies before providing any personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted on our website with an updated "Effective Date." Continued use of our services after such updates constitutes acceptance of the revised policy. 

11. Contact Us

If you have questions, concerns, or requests regarding your data, please contact us here

Thank you for trusting Heaven Rose Health with your personal information. We are committed to protecting your privacy and ensuring transparency in how we handle your data