2. GDPR and UK Data Protection Law

For users in the European Union, we comply with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR"). For users in the United Kingdom, we comply with the UK GDPR, as enshrined in the Data Protection Act 2018. We have not appointed a Data Protection Officer, as we do not fall within the categories requiring one under Article 37 of the GDPR.

3. Consent

By using our Site, you consent to the collection, use, and processing ofyour personal data as described in this Privacy Policy.

4. Legal Basis for Processing

We collect and process personal data where we have a lawful basis under Article 6 of the GDPR:
• Contractual necessity: Processing is necessary to take steps at your request prior to entering a contract, or for the performance of a contract to which you are a party. If you do not provide necessary personal data, we may be unable to provide certain services, such as contacting you.

5. Personal Data We Collect

5.1 Non-Automatic Collection
We may collect the following personal data when you interact with our Site, such as booking a call:
• First and last name
• Email address
• Phone number
5.2 Automatic Collection
Our Site uses cookies and tracking tools, including:
• Google Tag Manager – to manage and deploy marketing and analytics tags
• Microsoft Clarity – to analyse user behaviour and improve user experience
These tools may collect:
• IP address (anonymised where possible)
• Device and browser type
• Pages visited and time spent on the Site
• Interaction with buttons, forms, or other Site elements

6. How We Use Personal Data

Data is used only for the purposes specified or indicated on the relevant pages of our Site:
• Communication (e.g., responding to inquiries or bookings)
• Improving the Site and user experience
• Targeted marketing (with your consent where required)

7. Who We Share Personal Data With

7.1 Employees
Only staff members who need access to your data to perform their duties have access.
7.2 Third Parties We may share personal data with:
• Calendly – for booking calls;
• HubSpot – for communication and marketing purposes;
Other third parties include:
• Service providers necessary for website functionality and analytics (e.g., Tag Manager, Microsoft Clarity).
7.3 Legal and Other DisclosuresWe may disclose data if:
• Required by law or legal proceedings;
• Necessary to protect our legal rights;
• In the event of a sale or merger of the company.
We do not sell personal data to third parties.

8. Data Retention

We retain personal data for up to five years, unless a longer retention period is required or permitted by law.

9. Data Security

We use reasonable security measures, including:
• Two-factor authentication where possible;
• Secure server facilities.
While we take all reasonable precautions, we cannot guarantee absolute security due to inherent Internet risks.

10. Your Rights

Under the GDPR and UK GDPR, you have the following rights:
• Right to be informed;
• Right of access;
• Right to rectification;
• Right to erasure;
• Right to restrict processing;
• Right to data portability;
• Right to object.

11. Children

We do not knowingly collect data from children under 16 years old. If a child under 16 provides data, it will be deleted promptly. Parents or guardians may contact us to request data deletion.

12. How to Exercise Your Rights

Contact Excellence Health  at info(at)excellencehealth.net to:
• Access, modify, or delete your personal data;
• Challenge the processing of your data;
• Exercise any other GDPR rights.

13. Opt-Out

• You may opt out of marketing emails via the "unsubscribe" link in emails;
• You may also disable cookies via your browser settings.

14. Cookie Policy

A cookie is a small file stored on your device to collect browsing data.
• Third-party cookies (e.g., Tag Manager, Microsoft Clarity) monitor preferences and improve user experience;
• You can disable cookies in your browser, but some Site features may be affected.

15. Modifications

This Privacy Policy may be updated to maintain compliance or reflect changes in our data practices. Updates will be reflected in the "Effective Date" and users might be notified by email where appropriate.

16. Complaints

If you have complaints about our data processing, contact us at info(at)excellencehealth.net. You may also contact the UK Information Commissioner’s Office (ICO): www.ico.org.uk.