1. Who We Are

Fat Reduction Bristol (“we”, “us”, “our”) is the data controller responsible for your personal data. We operate from 80 Queens Road, Clifton, Bristol BS8 1QU.

ICO registration number: {ICO registration number}. For all data-related enquiries, email us at{data-privacy@yourdomain.com} or write to us at the address above.

2. Data We Collect

We may collect and process the following categories of personal data:

Contact & booking information: name, email address, phone number, and any notes you provide when booking a consultation or treatment.
Health information: details you provide on our pre-treatment health questionnaire. This is special-category data under UK GDPR and is collected only with your explicit consent.
Communication records: messages sent to us via our contact form, WhatsApp, email, or phone.
Website usage data: pages visited, session duration, device and browser type, and other analytics collected via Google Analytics 4 (GA4) and Google Tag Manager (GTM). See our Cookie Policy for details.
Lead & CRM data: booking and enquiry data is handled within GoHighLevel (GHL), our CRM platform. GHL acts as a data processor on our behalf.

3. How We Use Your Data

We use your personal data for the following purposes:

Processing and managing your booking and treatment appointments.
Sending booking confirmations, reminders, and aftercare information.
Responding to your enquiries and providing customer support.
Sending occasional marketing communications where you have consented to receive them.
Improving our website and services through anonymised analytics.
Complying with legal and regulatory obligations.

4. Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR:

Contract: processing necessary to fulfil your booking and deliver the treatment you have requested.
Legitimate interests: analytics, fraud prevention, and improving our services, where these interests are not overridden by your rights.
Consent: marketing communications and the processing of health questionnaire data. You may withdraw consent at any time.
Legal obligation: where we are required to retain records by law.

5. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected:

Booking and treatment records: 7 years (in line with general business record-keeping guidance).
Health questionnaires: 7 years from the date of the last treatment.
Marketing consent records: until you withdraw consent or 3 years from your last engagement, whichever is sooner.
Analytics data: as configured in GA4 (default 14 months for user-level data).

6. Sharing Your Data

We do not sell your personal data. We share it only with trusted service providers acting as data processors on our behalf, including:

GoHighLevel (GHL) — CRM, booking, and lead management.
Google LLC — Analytics (GA4) and advertising (Google Ads / GTM).
Vercel Inc. — Website hosting and delivery.

All processors are contractually required to handle your data in accordance with UK GDPR and only on our instructions.

7. Your Rights

Under UK GDPR you have the right to:

Access a copy of the personal data we hold about you.
Rectification of inaccurate or incomplete data.
Erasure (“right to be forgotten”) in certain circumstances.
Restriction of processing in certain circumstances.
Data portability — receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at {data-privacy@yourdomain.com}. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) atico.org.uk.

8. Cookies

We use cookies and similar technologies on our website. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page, dated with the date of the most recent revision. We encourage you to review it periodically.