Last updated: 26 August 2026

This Privacy Policy explains how Sittingwell Ltd trading as It’s All About Health collects, uses, shares and protects personal information when you visit our website, contact us, book or attend appointments, buy courses or workshops, join group calls, request free resources or receive marketing from us.

1. Who we are

Sittingwell Ltd is the controller responsible for the personal information described in this policy. We trade as It’s All About Health.

• Registered/trading address: Horsey View Farm, Newtown, Kingsbury Episcopi, Martock, Somerset, TA12 6BQ
• Company number: 07477148
• Email: hello@itsallabouthealth.co.uk
• Telephone: 01935 507910

Sittingwell Ltd is registered with the Information Commissioner’s Office (ICO).

Rachael and Lorna handle privacy enquiries, rights requests and data-protection complaints on behalf of Sittingwell Ltd.

2. Personal information we collect

Depending on how you interact with us, we may collect:

• your name, postal address, email address, telephone number and date of birth;
• booking, appointment, attendance, purchase, payment-status and transaction information;
• information you provide in contact forms, emails, messages, questionnaires and notes;
• for 1:1 clients, health and wellbeing information such as symptoms, medical history, medications, GP details and emotional or trauma history where relevant to the service;
• session notes and records relating to services provided;
• account, login, course-access and password-reset information held by our systems;
• newsletter subscriptions, marketing preferences and records of consent or withdrawal;
• testimonials, case-study material, photographs or other content you agree we may use;
• technical information such as IP address, browser/device information, website activity, security logs, consent preferences and analytics data where permitted.

We do not store complete payment-card details. Payments are processed by providers such as Stripe and SumUp.

3. How we collect information

We collect information directly from you when you use our website, complete a form, book an appointment, buy something, attend a session, join a programme, request a download, subscribe to emails or communicate with us.

We also receive limited information from service providers that help us run the business, such as GoHighLevel, Stripe, SumUp, Zoom, our website/hosting providers, Google and Meta, depending on the services and consent settings you use.

Please do not include sensitive medical, financial or other confidential information in a general website contact form. If you need to provide sensitive information, please contact us so that we can arrange a more appropriate way for you to provide it.

4. How and why we use personal information

We only use personal information where we have a lawful basis to do so. Our main uses are:

4.1 To provide appointments, programmes, courses, workshops and digital content

We use identity, contact, booking, payment and service information because it is necessary to enter into and perform our contract with you.

4.2 To process health and other special category information

Where we need health, medical, emotional or trauma information to provide a 1:1 service, we generally process it with your explicit consent. You may withdraw that consent, although this may mean we cannot safely or appropriately continue the relevant service. We may also process special category information where necessary to establish, exercise or defend legal claims.

4.3 To communicate with you about bookings and purchases

We use your contact details to send confirmations, reminders, service messages and information needed to provide what you requested. This is normally necessary for our contract with you or our legitimate interests in administering the service.

4.4 Marketing

We send newsletters and marketing through GoHighLevel only where you have opted in or another lawful marketing permission applies. You can unsubscribe at any time using the link in our emails or by contacting us. We do not add clients to marketing simply because they booked or purchased something.

4.5 Website analytics and improvement

Where required, we use analytics only after consent. We may use Google Analytics or similar tools to understand website use, improve pages and measure performance.

4.6 Advertising

Where you consent, the Meta/Facebook Pixel may be used to measure or support Facebook and Instagram advertising and related audience activity.

4.7 Security, fraud prevention and legal compliance

We may use information where necessary for our legitimate interests in protecting our website, systems, users and business, and to comply with legal obligations.

4.8 Testimonials and case studies

We use testimonial, case-study and related material only with the individual’s agreement. Where participation is incentivised, for example by discounted sessions, we disclose that clearly when the material is published.

5. Sharing personal information

We do not sell personal information. We may share information only where necessary with service providers and professional advisers, including:

• GoHighLevel, for bookings, contact records, course access, forms, newsletters and related communications;
• Stripe and SumUp, for payment processing;
• Zoom, for online appointments, group calls and workshops;
• website hosting, maintenance, security and IT providers, including Media Street where applicable;
• Google, where consented analytics or related website services are used;
• Meta, where consented advertising or measurement technology is used;
• accountants, insurers, legal advisers, regulators, courts or authorities where reasonably necessary or legally required.

We do not share client information with another healthcare professional, GP or other third party without written consent unless we are legally required or permitted to do so, or disclosure is necessary to protect vital interests in an emergency.

6. International transfers

Some of our technology providers may process personal information outside the UK. Where data protection law requires safeguards for an international transfer, we use an approved mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard available at the time.

7. How long we keep information

We keep information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, insurance and dispute-resolution needs. Our usual periods are:

• 1:1 client records and paper clinical/wellbeing notes: normally 7 years after the last service, unless a longer period is reasonably required;
• purchase, invoice and accounting records: normally 6 years after the end of the relevant accounting period;
• complaints and significant customer-service correspondence: up to 6 years where needed for legal or evidential purposes;
• marketing information: until you unsubscribe, withdraw consent or the information is no longer required, subject to retaining a suppression record so we can honour your choice;
• website security logs and technical records: according to the relevant provider’s normal retention settings and our security needs;
• case-study/testimonial consent records: for as long as the material is used and for a reasonable period afterwards to evidence permission.

8. Paper records, confidentiality and security

Detailed client health and wellbeing information is primarily kept in paper records that are stored securely and locked away. Limited identifying and contact information, GP details, date of birth and notes you choose to provide may also be held in GoHighLevel.

Information shared during private 1:1 sessions and our associated session records are treated as confidential. We will not disclose this information without your permission unless disclosure is required or permitted by law, or is necessary to protect someone’s vital interests in an emergency.

We use reasonable technical and organisational measures to protect personal information, including access controls, secure systems, website security measures and appropriate physical storage. No internet or electronic system can be guaranteed completely secure.

Where you have an account or login for a course, programme or other digital service, you are responsible for keeping your login details and password confidential and for taking reasonable steps to prevent unauthorised access to your account. Please contact us promptly if you believe someone else has accessed your account.

9. Children and young people

We rarely work with anyone under 18 and generally only work with people aged 16 or over. Where appropriate, we will consider capacity, consent, parental involvement and safeguarding requirements before providing a service to a young person.

10. Cookies and similar technologies

We use CookieYes to manage cookie choices. Necessary technologies may operate without consent where permitted by law. Analytics, advertising and other non-essential technologies are used only where the required consent has been given. Please see our Cookie Policy for more information.

11. Your data-protection rights

Depending on the circumstances and our lawful basis, you may have rights to ask us to:

• give you access to your personal information;
• correct inaccurate or incomplete information;
• erase information;
• restrict how information is used;
• provide certain information in a portable format;
• stop or object to certain processing;
• withdraw consent at any time where we rely on consent.

You also have an absolute right to object to direct marketing. To exercise a right, contact hello@itsallabouthealth.co.uk. We may need to confirm your identity before responding.

12. Complaints

Please contact us first if you have a privacy concern. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

ICO information: ico.org.uk

13. Third-party links

Our website may link to websites or services operated by other organisations. Their privacy practices are outside our control, so please read their privacy information when you use them.

14. Changes to this policy

We may update this Privacy Policy where our services, technology or legal obligations change. The current version will be published on our website with an updated date.