Privacy Policy

My Go To Wellness™

Small Changes. Big Impact. Real Support.

Effective date: 2 August 2026

Your Privacy

My Go To Wellness™ respects your privacy and is committed to handling personal information lawfully, fairly and transparently.

This Privacy Policy explains how we collect, use, store and share personal information when you:

• visit our website;
• make an enquiry;
• book or purchase a service;
• participate in coaching, training, programmes, memberships, workshops or corporate wellness services;
• communicate with us; or
• receive marketing where you have agreed to it or another lawful basis applies.

1. Who Is Responsible For Your Information?

The data controller is:

My Go To Ltd trading as My Go To Wellness™

Company number: 13343505

Privacy contact: Sophia Thompson

Email: info@mygotowellness.co.uk

My Go To Ltd decides why and how personal information is used for the activities described in this policy.

Our full contact details are in section 18.

2. Personal Information We Collect

Depending on how you interact with us, we may collect:

Identity and contact information

• name;
• email address;
• telephone number;
• postal address where required for a mobile service, contract or correspondence;
• date of birth where relevant to safe service delivery; and
• emergency contact information where requested.

Booking and service information

• enquiries and service interests;
• appointment dates, attendance, cancellations and rescheduling;
• the service, programme or membership purchased;
• delivery location and method;
• goals, preferences, progress notes and coaching communications; and
• records of terms, permissions and early-start requests.

Payment and transaction information

• payment status, amount, date, method, invoices, receipts and transaction references;
• referral or promotional information where relevant; and
• limited payment information received from our payment providers.

Square, Clearpay and other payment providers process payment-card or eligibility information under their own privacy information. We do not receive or store your complete payment-card number.

Health and wellbeing information

Where necessary for a service, we may collect information about:

• health conditions, injuries and symptoms;
• medication and treatment;
• allergies and intolerances;
• pregnancy and menopause information;
• mobility, fitness, nutrition and lifestyle;
• relevant measurements and progress; and
• medical clearance or professional recommendations you choose to provide.

Health information is special-category personal data and receives additional legal protection.

Communications and media

• messages sent through email, telephone, SMS, WhatsApp, contact forms or social media;
• complaints, feedback and support requests;
• survey or workshop responses; and
• photographs, video, audio, testimonials or case studies where a separate appropriate agreement or consent applies.

Website and technical information

• IP address;
• device, browser and operating-system information;
• pages visited, interactions, referring website and approximate location derived from technical information;
• cookie choices; and
• website security and diagnostic information.

Please read our Cookie Policy for details about the specific cookies and similar technologies used by our website.

3. How We Receive Information

We receive most personal information directly from you when you enquire, book, complete a form, make a payment, participate in a service or contact us.

We may also receive information from:

• Square, Clearpay and other booking or payment providers;
• a person who refers you, where they have permission to share your details;
• your employer or organisation for a corporate wellness service;
• agreed venues or delivery partners where necessary to administer a service;
• healthcare or other professionals where you have authorised the disclosure or another lawful basis applies;
• social media platforms when you interact with our pages; and
• website, analytics and security providers.

If another person provides information about you, we may contact you to confirm it and provide this Privacy Policy where required.

4. Why We Use Information And Our Lawful Bases

We use personal information only where we have a lawful basis.

Enquiries and pre-contract communication

Purpose: To respond to enquiries, discuss suitability and take steps requested before a service agreement.

Lawful basis: Steps before entering a contract and our legitimate interests in responding to genuine enquiries and managing the business.

Bookings, services and client administration

Purpose: To arrange appointments, provide purchased services, manage programmes and memberships, issue service communications and maintain client records.

Lawful basis: Performance of a contract or steps requested before entering a contract.

Payments and financial records

Purpose: To process payments, issue invoices and receipts, manage outstanding amounts, prevent fraud and maintain accounting and tax records.

Lawful basis: Performance of a contract, legal obligation and our legitimate interests in protecting the business and managing accurate financial records.

Health, safety and service suitability

Purpose: To assess suitability, adapt services, manage health and safety, respond to incidents and remain within our professional scope.

Lawful basis under Article 6 UK GDPR: Performance of a contract, legitimate interests in providing safe and appropriate services, and legal obligation where applicable.

Additional Article 9 condition for health information: Explicit consent under Article 9(2)(a) UK GDPR. In limited circumstances, we may also process health information where necessary to establish, exercise or defend legal claims, or to protect vital interests where a person is physically or legally incapable of giving consent.

We request explicit health-data consent separately where required. You may withdraw that consent, but we may be unable to continue a service safely if the relevant information can no longer be used. Withdrawal does not make earlier lawful processing unlawful.

Client support and service improvement

Purpose: To answer questions, monitor service quality, handle feedback and improve our administration and services.

Lawful basis: Performance of a contract and our legitimate interests in providing effective support and improving the business.

Complaints, incidents and legal matters

Purpose: To investigate concerns, respond to complaints, manage insurance matters, protect legal rights and comply with lawful requests.

Lawful basis: Legal obligation and our legitimate interests in resolving disputes and establishing, exercising or defending legal claims. Where health information is involved, the additional Article 9 condition may be legal claims under Article 9(2)(f).

Marketing

Purpose: To send newsletters, wellness updates, offers or event information.

Lawful basis: Consent where required, or legitimate interests where electronic-marketing law permits. You can opt out at any time.

Photographs, video, audio and testimonials

Purpose: To publish agreed promotional or educational media.

Lawful basis: Consent or another specifically agreed lawful basis explained at collection. Refusing promotional media use does not affect access to the core service.

Website operation, analytics and security

Purpose: To operate and protect the website, remember choices, understand performance, diagnose faults and prevent misuse.

Lawful basis: Our legitimate interests in operating a secure and effective website, legal obligation where applicable, and consent for cookies or similar technologies where consent is required.

5. Health Information

We collect only the health information reasonably required to assess suitability and deliver services safely and appropriately.

Health information is not used for unrelated marketing.

Access is limited to people who need the information for an authorised purpose.

We may ask you to update health information where circumstances change.

We may share relevant information in an emergency where necessary to protect life or safety, or where another lawful basis and Article 9 condition applies.

6. If You Do Not Provide Information

You may choose not to provide personal information.

However, if information is required to arrange a booking, take payment, meet a legal obligation or assess whether a service can be delivered safely, we may be unable to accept or continue the service without it.

We will explain where providing information is mandatory and the likely consequence of not providing it.

7. Who We Share Information With

Where necessary, we may share limited personal information with:

• booking, appointment and payment providers, including Square and Clearpay where used;
• website hosting, email, cloud storage, communications and IT-support providers;
• accountants, insurers, professional advisers and legal representatives;
• venues and delivery partners where required to arrange an agreed service;
• corporate clients where they purchased an organisational service, while protecting individual health and confidential information;
• healthcare professionals or emergency services where you authorise this or another lawful basis applies;
• regulators, courts, law-enforcement bodies, HMRC or other authorities where legally required; and
• a purchaser or successor if the business is restructured, sold or transferred, subject to appropriate confidentiality and legal safeguards.

Service providers acting as processors must use personal information only for authorised purposes and under appropriate contractual and security requirements.

Some organisations, such as payment providers or social media platforms, may act as independent controllers for their own activities. Their privacy policies explain how they use information.

We do not sell or rent personal information.

8. International Transfers

Some technology, payment, communications or cloud providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we use providers and arrangements designed to provide the protection required by UK data protection law. Depending on the destination, these may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, and appropriate transfer-risk assessments.

You may contact us for more information about the safeguards relevant to your information.

9. How Long We Keep Information

We keep personal information only for as long as needed for the purpose collected, including legal, tax, accounting, insurance, safeguarding and dispute requirements.

Our standard retention periods are:

• enquiries that do not become clients: up to 12 months after the last meaningful contact;
• client agreements, service records, coaching records and relevant health or participation records: up to seven years after the client relationship ends, unless a longer or shorter period is justified;
• financial, invoice and transaction records: at least six years from the end of the financial year to which they relate, or longer where legally required;
• complaints, incidents and legal-claim records: for the period required to investigate the matter and meet applicable insurance or legal limitation requirements;
• marketing contact information: until you unsubscribe, withdraw consent or we determine that the information is no longer current, with a minimal suppression record retained where needed to respect your opt-out;
• photographs, testimonials and promotional media: for the agreed use period or until consent is withdrawn for future use, subject to material already lawfully published; and
• cookie and analytics information: for the periods stated in our Cookie Policy or cookie settings.

When information is no longer required, we securely delete or anonymise it.

10. How We Protect Information

We use proportionate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, passwords, secure systems, device protections, backups, staff confidentiality, supplier checks and periodic reviews.

No internet or storage system can be guaranteed completely secure. We assess and respond to suspected personal-data breaches and notify affected people or the Information Commissioner’s Office where the law requires it.

11. Marketing Choices

We send electronic marketing only where we have an appropriate lawful basis and comply with applicable direct-marketing rules.

You can unsubscribe at any time by using an unsubscribe option or contacting info@mygotowellness.co.uk.

Opting out of marketing does not stop necessary service communications about bookings, payments, safety or an active client relationship.

We do not use health information to target unrelated marketing.

12. Cookies And Similar Technologies

Our website may use cookies and similar technologies to provide essential functions, remember preferences, understand website performance and support agreed marketing activities.

Where consent is legally required, non-essential technologies will not be used until you have made a choice through the cookie controls.

You can change or withdraw your cookie choice through the available cookie settings. You may also adjust browser controls, although blocking essential technologies may affect website functions.

Please read our separate Cookie Policy for the categories, purposes, providers and lifetimes of the technologies currently used.

13. Your Data Protection Rights

Depending on the circumstances and lawful basis, you may have the right to:

• be informed about how your information is used;
• request access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to processing based on legitimate interests;
• object to direct marketing at any time;
• receive certain information in a structured, commonly used and machine-readable format and ask for it to be transferred where data portability applies;
• withdraw consent where processing relies on consent; and
• complain to the Information Commissioner’s Office.

These rights are not absolute and may depend on the reason information is used. We will explain if a requested right does not apply.

To exercise a right, email info@mygotowellness.co.uk.

We may ask for reasonable information to confirm your identity and locate the relevant records. We will respond within the timeframe required by law, normally one month. We do not usually charge a fee.

14. Automated Decision-Making

My Go To Wellness™ does not make decisions based solely on automated processing that produce legal or similarly significant effects for you.

Independent providers such as Clearpay may use automated eligibility or fraud-prevention systems for their own services. Their privacy information explains those activities and the rights available to you.

15. Links And Third-Party Platforms

Our website may link to Square, Clearpay, social media, venues or other third-party websites and services.

Those organisations control their own platforms and privacy practices. Please read their privacy information before providing personal information.

This Privacy Policy applies to processing controlled by My Go To Ltd. It does not replace the privacy policies of independent third parties.

16. Complaints

Please contact us first if you have a concern about how we use personal information so that we have an opportunity to investigate.

Email: info@mygotowellness.co.uk

You may also complain to the Information Commissioner’s Office:

Website: www.ico.org.uk/make-a-complaint

Telephone: 0303 123 1113

Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

You do not have to contact us before approaching the ICO.

17. Changes To This Privacy Policy

We may update this policy to reflect legal, regulatory, technology or business changes.

The current version and effective date will be published on this page. Where a change materially affects how we use existing personal information, we will provide an additional notice where required.

18. Contact Us

For questions, requests or concerns about personal information, contact:

My Go To Ltd trading as My Go To Wellness™

Privacy contact: Sophia Thompson

Email: info@mygotowellness.co.uk

Telephone: 07368 627416

Registered office (correspondence only): 52 Edgewood Road, Rednal, Birmingham, B45 8SE

Client services are not delivered at this address.

Company number: 13343505