WEBSITE PRIVACY POLICY FOR PATIENTS AND CLIENTS
Last Updated: October 07, 2025
This document is designed to help you understand why and how Beautiful Life…Style Ltd. uses your personal data through the use of our website at www.beautifullifestyle.co.uk. By personal data, we mean information that relates to a living individual and which can identify or be identified with that individual.
We are Beautiful Life…Style Ltd., a company with Companies House Number 15794996. Our registered office is based in Yorkshire.
Below, we have tried to provide you with as much information as we can to explain how your personal data may be used. We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share any information relating to you.
If you have any questions about this document or how we handle your personal data, you may contact us by emailing us at info@beautifullifestyle.co.uk.
WHAT PERSONAL DATA DO WE COLLECT FROM YOU?
In delivering our services, we may collect and process the following personal data about you:
- Your Name and Contact Information: Including your full name (including any middle names), email address, telephone number, and residential address.
- Demographic Information: Your date of birth.
- Emergency Contact Details: As provided by you.
- GP Details: Your UK GP’s name and address (for Medical Consultations).
- Medical and Health Information: Your medical history and information about your health as completed by you in our Medical History Form or intake questionnaires. This may include details of medical conditions, medication, weight, lifestyle, and other information that might be relevant to your health such as race, ethnicity, sex life or sexual orientation, or religious or philosophical belief.
- Billing Information: Your billing information, transaction and payment card information.
- Contact History: Your contact history with us.
- Website Usage Information: Information about your usage of our website through cookies. Please see our separate Cookie Policy for more details, which can be found in the footer of our website. This may include technical information about the device and internet protocol (IP) address used to connect your computer to the internet. It may also include information about your visit, including the full URL, resources you viewed or searched for, length of visit to certain pages and page interaction information. We collect this information so that we can:
- tailor and personalise user experience;
- monitor our website usage to improve its content, layout and performance; and
- improve our services and products.
- Information You Submit: When contacting us, enquiring about services, or booking appointments, we process personal information about you (such as your name, address, email address, telephone number, country of residence, and details about your health concern or reason for enquiry/booking, and anything else that you provide to us) in order to respond to your enquiry or complaint, or when you use our online booking system.
- Information from Our Online Booking System (Semble): When you use our integrated online booking system (Semble), we collect personal data necessary for booking and providing our services. This typically includes your name, contact details, reason for booking, and for UK medical patients, your GP details. Payments are processed via Stripe, which is integrated with Semble.
- Health Questionnaires/Forms: Any health questionnaires or forms that collect sensitive personal data (health information) are managed securely within Semble and are used for the purpose of initial assessment and to inform your medical consultation or health coaching. When you first register for our services and at various points after that, we will ask you to provide health data and complete questionnaires about your health and wellbeing. This includes questions about your symptoms, medication and health background.
- Marketing Information: If you sign up to receive marketing emails or information, we will use your name and email address to send you the material you have requested, such as our newsletter.
- AI Services (Meal Refine Service): We offer AI-based meal planning services that involve collecting interview data and using artificial intelligence to generate personalized recommendations. Due to the specialized nature of AI data processing, including the use of your responses to train custom AI models, full details about data collection, processing, storage, and your rights regarding our AI services are covered in our separate AI Services Privacy Policy, available in the footer of our website.
If you do not provide the personal data we ask for, it may delay or prevent us from providing our services to you.
HOW IS YOUR PERSONAL DATA COLLECTED?
We collect most of this personal data directly from you – during consultations, by telephone, text or email and/or via our website and questionnaires.
However, we may also collect information:
- from a third party with your consent, e.g. your GP;
- from cookies on our website – for more information on our use of cookies, please see our Cookie Policy;
- via our IT systems.
HOW AND WHY WE USE YOUR PERSONAL DATA (LAWFUL BASES)
We will use your personal data to register you as a patient/client, administer the provision of services to you, manage our relationship with you and to improve the level of services that we offer.
Under data protection law, we can only use your personal data if we have a proper reason, e.g.:
- where you have given consent;
- to comply with our legal and regulatory obligations;
- for the performance of a contract with you or to take steps at your request before entering into a contract; or
- for our legitimate interests or those of a third party.
A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own.
The table below explains what we use your personal data for and why.
|
What we use your personal data for |
Our reasons (the legal basis for using your data) |
|
Providing our services to you |
To perform our contract with you or to take steps at your request before entering into a contract. |
|
Operational reasons, such as improving efficiency, training and quality control |
For our legitimate interests or those of a third party i.e. to be as efficient as we can so we can deliver the best service to you at the best price. |
|
Updating and enhancing client records |
To perform our contract with you or to take steps at your request before entering into a contract. |
|
Retaining evidence of the treatment / advice we have given you |
To comply with our legal and regulatory obligations. |
|
Providing marketing information to you on other services we offer |
By consent to keep in touch with our customers about the services we offer. |
|
Gathering and providing information required by or relating to audits, enquiries or investigations by regulatory bodies |
To comply with our legal and regulatory obligations. |
|
Providing information required by external medical practitioners and healthcare personnel involved in your care and treatment |
To perform our contract with you or to take steps at your request before entering into a contract. To comply with our legal and regulatory obligations. |
|
Responding to enquiries, complaints and requests |
For our legitimate interests to serve our customers. If you are an existing customer, we may add information about the enquiry, complaint or request to other records we hold about you so we can provide a better customer service. |
HOW AND WHY WE COLLECT SPECIAL CATEGORY PERSONAL DATA
In providing our services to you, we will be required to collect more sensitive personal data from you, to which additional protections apply under data protection law. This includes:
- information relating to your health, including details of medical conditions, medication, weight and lifestyle;
- information revealing your racial or ethnic origin; and
- information on your sex life or sexual orientation or religious or philosophical belief that may be relevant to your health.
The legal basis for us processing such special category personal data is for the purposes of offering you healthcare, treatment and the management of our healthcare systems and services. This includes for the purposes of preventative medicine and giving you medical diagnoses.
For our medical consultations provided to individuals in the UK:
- The processing of your health data is necessary for the provision of health or social care or treatment or the management of health or social care systems and services (Article 9(2)(h) of GDPR). This is combined with the lawful basis of performance of a contract (Article 6(1)(b) of GDPR) to provide you with medical services.
For our health coaching services provided internationally:
- The processing of your health-related information relies on your explicit consent (Article 9(2)(a) of GDPR) obtained during our onboarding process, and is also necessary for the performance of a contract (Article 6(1)(b) of GDPR) to provide you with our health coaching services.
As the data involved relates to your health, we shall ensure that any such consent obtained is explicit consent. Please note that without your consent to do this, we will be unable to offer you access to our clinic and services. This is because your health data is necessary for us to provide the support and information.
WHO WILL HAVE ACCESS TO YOUR PERSONAL DATA?
Internally, we only grant access to personal data (including special category personal data) to those people that need access to that data to carry out their role.
Externally, we may share from time to time personal data (including special category personal data) with the following categories of recipients, but subject always to due respect for your privacy:
- Our Service Providers: For instance:
- The companies that manage our IT infrastructure (e.g., the company who provide our IT support).
- Companies that provide us with cloud-based IT systems (e.g., Semble Software for practice management, data storage, booking, and managing records).
- Website Hosting providers (e.g., WordPress, GoDaddy).
- Email Marketing providers (e.g., Mailchimp).
- Payment Processors (e.g., Stripe, integrated with Semble).
- External companies providing services to us such as blood testing and analysis (e.g., laboratory providers, online pharmacy).
- Xero for accounting purposes
- Professionals (e.g., accountant).
- Our External Advisers: For instance, IT consultants, accountants and potentially lawyers in the future, when professional advice is required.
- Your GP and other Medical Practitioners or Healthcare Professionals: Involved in your care or treatment, only where we have been given express permission to do so or we have cause to believe that you are a danger to yourself or others.
- Our Regulators, Law Enforcement, Intelligence Services and Other Government Authorities: When they require us to do so. This includes the General Medical Council (GMC), the Information Commissioner’s Office (ICO), and the Care Quality Commission (CQC).
TRANSFERS OF YOUR INFORMATION OUTSIDE OF THE UNITED KINGDOM
The UK has differing data protection laws than other countries, some of which may provide lower levels of protection of privacy. We generally store and process personal data inside the UK. However, it is sometimes necessary for us to share your personal data to countries outside the UK, for example, where the third parties who assist us in providing the services (suppliers) are outside of the UK.
In those cases, we will comply with applicable UK laws designed to ensure the privacy of your personal data. Any transfer of your data will be carried out in accordance with the law to safeguard your privacy rights and give you remedies in the unlikely event of a security breach or to any other similar approved mechanisms.
Our Semble software is GDPR compliant in UK, Northern Irland and France. Clients are consented to their data being stored under UK GDPR protections.
We can provide more information on the countries outside of the UK to which we transfer your personal data on request.
HOW WE KEEP YOUR DATA SECURE
We strive to implement appropriate technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing. We aim to ensure that the level of security and the measures adopted to protect your personal data are appropriate for the risks presented by the nature and use of your personal data.
We limit access to your personal data to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
WHEN WILL WE DELETE YOUR DATA?
We will not keep your personal data for any longer than we need it for the purpose for which it is used. When it is no longer necessary to keep your personal data, we will delete or anonymise it.
Different retention periods apply for different types of personal data:
Medical and Health Coaching Records:
We retain patient and client records for a minimum of six (6) years after the date on which we stop providing services to you, in line with UK medical record-keeping standards for adult patients.
For health coaching clients, we apply the same retention period to ensure continuity and compliance with UK data protection principles.
Records are reviewed and deleted on an annual basis, at the beginning of each calendar year. This means some records may be retained for up to seven (7) years before deletion, depending on when the six-year period expires.
After this point, all records are securely deleted or anonymised, unless further retention is required by law, professional regulation, or at your written request.
MealRefine AI Personalised Assistant Services: retention of the video recording is for maximum of 1 month. Retention of the transcript is for two (2) years, with the purpose that it can be updated, if needed, in the MealRefine Update Service.
General Enquiries and Marketing Data: If you make a general enquiry but do not become a patient or client, or if you subscribe to our marketing list, we will retain your data for a period of 2 years, unless you request earlier deletion.
Records are reviewed and deleted on an annual basis, at the beginning of each calendar year. This means some transcript records, general enquiries and marketing data may be retained for up to three (3) years before deletion, depending on when the two-year period expires.
YOUR RIGHTS
As a data subject, the law gives you certain rights in respect of the personal data that we hold about you. Below is a short overview of those rights (for more information about the rights you have in respect of your personal data please visit the Information Commissioner’s Office website: www.ico.org.uk).
- The Right of Access: With some exceptions designed to protect the rights of others, you have the right to a copy of the personal data that we hold about you. Access to the personal data we hold on you is free of charge; however, we may make a reasonable charge for additional copies of that data beyond the first copy, based on our administrative costs. Where you have given us your personal data (i.e. you have completed the Medical History Form), you may have the right to receive your copy of this data in a common electronic format.
- The Right to Correction (Rectification): You have the right to have the personal data we hold about you corrected if it is factually inaccurate. This right does not extend to matters of opinion.
- The Right to Erasure (“the right to be forgotten”): In some limited circumstances, you have the right to have personal data that we hold about you erased. This right is not generally available where we still have a valid legal reason to keep the data (for example, in connection with a legal claim or because we are obliged to do so by law).
- The Right to Object: You have the right to object to our processing of your personal data where we rely on “legitimate interests” as our legal basis for processing, but we may be able to continue processing if our interest outweighs your objection.
- The Right to Prevent Processing in Some Circumstances: You also have the right in some circumstances to request that temporary restrictions are placed on how we process your personal data. For example, if you contest its accuracy or where we are processing it on the basis of our legitimate interest and you contest our assessment that our interest overrides your rights.
- The Right to Opt Out of Marketing: You have the right to require us to stop using your personal data to send you marketing information. If you want us to stop sending you marketing information, the quickest and most efficient way is to use the provided “unsubscribe” links in our communications (although you can contact us direct on the details below if you prefer).
If you would like to exercise any of your rights, please contact us by emailing info@beautifullifestyle.co.uk. We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within three months. Please note that exceptions apply to some of these rights which we will apply in accordance with the law. In order to protect your privacy, we may ask you to prove your identity before we take any steps in response to a request you have made.
COMPLAINTS TO THE REGULATOR
We treat the protection of your personal data with the utmost importance but if you have cause to complain, we would always ask that you contact us first so we can attempt to resolve the matter for you.
However, you also have the right to lodge a complaint about our handling of your personal data with the Information Commissioner’s Office (ICO). Information about how to do this is available on their website at www.ico.org.uk or you can contact them on 0303 123 1113 or via their website www.ico.org.uk/make-a-complaint.
WITHDRAWING CONSENT
If we are processing your personal data on the basis of your consent, you have the right to withdraw that consent at any time, in which case we will stop that processing unless we have another legal basis on which to continue.
Please be advised that in certain circumstances, withdrawal of consent to continue processing your personal data may have further impact on your future access to, or benefit from, our services or part of them.
CHANGES TO THIS POLICY
We may change this privacy policy at any time. Where we make significant changes, for instance where we use your personal data for materially different purposes, we will email you to let you know.
