Privacy Policy

This policy explains what personal information The Body Consultants collects through bodyconsultants.co.uk, why we collect it, who we share it with and the rights you have over it.

Who we are

The Body Consultants provides advanced lymphatic treatments and professional training from our clinic in Alderley Edge, Cheshire, and through online courses. We are the data controller for the personal information described in this policy.

• Business name: The Body Consultants
• Address: Alderley Edge, Cheshire, UK
• Email: athena@bodyconsultants.co.uk

If you have any question about this policy or your information, email us and we'll reply within one month.

The information we collect

We only collect information you give us or that is created when you use our website, and we never sell it.

• When you send an enquiry: your name, email address, phone number, country, the type of enquiry, your message and whether you've opted out of news and offers.
• When you book a course or buy online: your name, email address, phone number, billing city, postcode and country, company name and VAT number if given, what you bought, amounts paid and due, and confirmation that you accepted our terms.
• When you pay: payments are handled by Stripe, so we never see or store your full card details. We keep the payment reference, amount, method and status, and the reason if a payment is declined.
• When you use your account: your sign-in requests and the secure sign-in links we email you. We don't use passwords for customer accounts.
• When you study an online course: which courses you can access, your progress through each video, and the access records described in the online courses section below.
• When we email or text you: a record of each message sent and whether it was delivered.
• When you visit our website: your cookie choices and, only if you accept analytics or marketing cookies, how you use the site.

How we use it and why we're allowed to

Data protection law requires a lawful basis for each use of your information, and these are ours.

• Replying to your enquiry and following up about what you asked: legitimate interests, so we can respond to people who contact us.
• Taking bookings and payments, giving you access to courses, and sending confirmations, balance reminders and invoices: contract, so we can provide what you've booked or bought.
• Keeping payment, invoice and tax records: legal obligation under UK tax and accounting rules.
• Monitoring access to online courses: legitimate interests, to protect our course content and make sure each licence is used by the person who bought it, and contract, to enforce our course terms.
• Sending news and offers: legitimate interests under the "soft opt-in" for customers and people who have enquired, until you opt out.
• Measuring how our website is used and showing relevant adverts: consent, only if you accept analytics or marketing cookies.
• Keeping our website and systems secure and fixing errors: legitimate interests, to run a safe, working website.

Health information

We only use health information you choose to share with us, and only to respond to you and plan your care.

You might mention a medical condition, recent surgery or other health details in an enquiry or when booking a treatment. This is special category data, and we only use it with your explicit consent, which you give by choosing to share it. Please only share health information that's relevant to your enquiry.

We keep health information on a need-to-know basis. It isn't used for marketing, and our automatic text alerts never include your message. You can ask us to delete it at any time.

Consultation forms completed in the clinic are kept separately from the website.

Online courses: how we protect our content

Each online course licence is for one person, so we monitor how courses are accessed to stop them being shared or copied.

Every time you watch a course, we record:

• your IP address
• your device and browser
• when each viewing session starts and ends
• which videos you watch and how far you get

We use these records to spot accounts being used by more than one person, on too many devices or from unusual locations. If we see signs of sharing, we may limit or suspend access to the course, either automatically or after a review by us.

If your access is suspended and you think it's a mistake, email athena@bodyconsultants.co.uk and a member of our team will review it personally.

Your video progress is also used to show you where you are in the course and to help us support you.

Marketing

We may send you news about our treatments, courses and offers by email or text, and you can stop them at any time.

We only send marketing to people who have bought from us or enquired about our services, and only about similar treatments and courses. You can opt out when you contact us by ticking the box on our enquiry form, by using the unsubscribe link in any email, by replying STOP to any text, or by emailing us.

Opting out of marketing doesn't stop messages about something you've booked or bought, such as confirmations, payment reminders and course access.

Who we share it with

We share your information only with the providers who help us run the business, and each one may use it only on our instructions.

• Stripe: processes card, Apple Pay and Google Pay payments.
• Klarna and Clearpay: provide pay-later options at checkout if you choose them. They are responsible for their own credit checks under their own privacy policies.
• Sevalla: hosts our website and database.
• Cloudflare: protects our website, speeds it up and stores course files and images.
• Resend: sends our emails.
• The SMS Works: sends our text messages.
• GoHighLevel: our customer relationship system, used by our marketing team to manage enquiries.
• Our marketing team: follows up enquiries and runs our marketing on our behalf.
• Google Analytics and Meta: measure website use and show adverts, only if you accept those cookies.
• Our website support provider: maintains our website and may access information when fixing problems.

Treatment bookings are made through Timely, which has its own privacy policy. We don't pass any information to Timely when you click a booking link.

We may also share information if the law requires it, for example with HMRC, or to protect our rights.

Transfers outside the UK

Some of our providers store or process information outside the UK, mainly in the United States and the European Economic Area, and we only use them where your information stays protected.

Where information leaves the UK, we rely on one of these safeguards: a UK adequacy decision (which covers the EEA), the UK-US data bridge for providers certified under it, or the UK's International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. You can ask us for more detail about the safeguard for any provider.

How long we keep it

We keep information only for as long as we need it, then delete or anonymise it.

• Payments, invoices, bookings and orders: 6 years after the end of the financial year they relate to, as UK tax law requires.
• Your customer account: until 6 years after your last purchase, unless you ask us to close it sooner. We still keep the records above.
• Enquiries: 2 years after we last heard from you.
• Failed or abandoned checkouts: 2 years.
• Online course access records: while your course access is active, plus 12 months.
• Online course progress: while your account exists.
• Records of emails and texts sent: 2 years.
• Cookie choices: 2 years, after which we ask again.
• Website error logs: 12 months.
• Marketing preferences: until you opt out, after which we keep a note of your opt-out so we don't contact you again.

Cookies

We only use analytics and advertising cookies if you accept them, and you can change your mind at any time.

Essential cookies keep the website working, for example remembering your basket and keeping you signed in. Google Analytics and the Meta Pixel load only after you accept them, and we never send them your name, email address or phone number. You can change your choice at any time using the Cookie preferences link at the bottom of every page. Our Cookie Policy explains each cookie in detail.

Keeping your information secure

Our website is encrypted, payments are handled entirely by Stripe, and access to our systems is protected by two-factor authentication and limited to the people who need it.

Children

Our services are for adults, and we don't knowingly collect information from anyone under 18.

Your rights

You can ask us at any time to see, correct or delete your information, and we'll respond within one month.

You have the right to:

• get a copy of the information we hold about you
• correct anything that's wrong or incomplete
• ask us to delete your information, unless we must keep it by law
• ask us to limit how we use it
• receive it in a format you can take elsewhere
• object to us using it for our legitimate interests, including marketing
• withdraw consent at any time, where we rely on it
• ask for a person to review any automatic decision, such as a course access suspension

To use any of these rights, email athena@bodyconsultants.co.uk. We may ask you to confirm your identity first.

Complaints

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We'll update this policy when our services or the law change, and post the new version here with the date it changed. Last updated: 11 November 2026.