Privacy Policy
This Privacy Policy sets out the data processing practices of AB Wellness & Reflexology. Please note that all data thus captured will be used and held in accordance with the requirements of the Data Protection Act 2018.
If you have any requests concerning your personal data or any queries with regard to how we handle your data, you can contact us by email: info@abwr.co.uk
So when and how do we collect your data?
Your personal details are collected when you contact us via email, telephone, and our website’s enquiry form.
In addition to the above, we collect information automatically about your visit to our website. Please see our Cookies page for further information.
We process personal information collected via this website for the purposes of dealing with your enquiries. Our legal grounds for doing so fall under the criterion of ‘Legitimate Interest’ as a service provider, and/or for contractual purposes.
Marketing.
We would like to use your personal data to send you details of products or services we offer that we have identified as likely to be of interest to you.
This information will only ever be sent to you in line with the preferences you indicated when you provided the personal data.
If at any point you would like to opt-out of receiving communications from us, or you would like to change the channels (such as email or post) that we use to contact you, please contact us as stated above.
Third party usage.
There may be occasions when we need to send your data to third parties. We will always try to ensure that third parties respect your privacy and abide by the new GDPR at all times. However, once the data leaves us, it is ultimately the responsibility of the third party to make sure they have
processes in place to protect your data.
Retention periods.
We will keep the personal data submitted in connection with your enquiry for 90 days. If this enquiry does not lead to the provision of a product or service and/or the creation of a contract, the information will be erased.
In terms of personal data we use for marketing purposes, we will keep this data for as long as we are able to market to you. If you withdraw consent or opt-out of marketing communications, we will only keep your contact details to ensure we do not contact you again for marketing purposes.
Data subject’s rights.
You have rights in respect of your personal data, which include:
The right to be informed. This means you have the right to be told about the collection and use of the personal data you provide. This privacy policy sets out the purpose for which we process your personal data, how long we will keep your data, and whom we share your data with. If you have
any questions about how and why we process your data, please contact us.
The right of access. You have the right to know whether we are processing your personal data, and a right to request this data at any time. This is known as a Subject Access request. In order to obtain your data, please contact us.
The right to rectification. You have the right to have any incorrect personal data corrected, or completed if incomplete.
The right to erasure. This is the right to be forgotten, allowing you to request that we erase your personal details where there is no valid reason for us to keep it. This is not an absolute right and only applies in certain circumstances.
The right to restrict processing. This is not an absolute right and only applies in certain circumstances. It means we can store your data, but not use it.
The right to data portability. You have the right to move, copy or transfer your personal data from one IT environment to another. This right applies to data you have provided to us and are processing on the legal basis of consent, or as part of a contractual obligation.
The right to object. You have the right to object to our processing of your personal data based on legitimate interests, or for the performance of a task in the public interest, the dissemination of direct mail, or for research purposes. This comes with the following conditions:
Legitimate interest – your objection should be based on your particular situation. We can continue to process your data if we can demonstrate compelling legitimate grounds that override your interests.
Direct Marketing – you have an absolute right to ask us to stop processing your data for this purpose. We will action your request as soon as possible.
Research – your objection should be based on your particular situation. If we are conducting research where the processing is necessary for the performance of a public task, we can refuse to comply with your objection. All of the above requests can be made verbally or in writing, and will be actioned within 28 days.
Processing based on consent.
Where we process your personal data based on your consent, you have the right to withdraw that consent at any time without reason. You can opt-out by using the unsubscribe/opt-out in any marketing we send you, or by contacting us.
International transfers.
As part of our processing activities we may have to transfer your personal data outside of the country. We will ensure we have a written data processing agreement with these processors, which adheres to the same level of data protection as here in the United Kingdom.
The right to lodge a complaint to the supervisory authority. If you are unhappy with any aspect of our data handling, you can register a complaint with the Information Commissioner’s Office here: ico.org.uk/concerns
Statutory/contractual requirement to provide personal data.
The personal data you provide us with is necessary for us to carry out the contract you have entered into with us, or for us to perform our obligations under Statute.
Changes to the privacy policy.
This privacy policy is regularly reviewed and will be updated when necessary. If we make any significant changes to the policy, we will communicate these to you in due course. It was last updated on the 7th July 2026.
GDPR Complaints Procedure
AB Wellness & Reflexology
How we handle your data protection concerns
1. About This Document
This document sets out the complaints procedure for [Your Business / Trading Name] (referred to as “we”, “us” and “our” throughout this document). It explains how we will handle any complaint you make about the way we collect, use, store, share or otherwise process your personal data under the UK General Data Protec1on Regula1on (UK GDPR) and the Data Protection Act 2018.
Important: This procedure applies to GDPR and data protection complaints only. For all other types of complaint, please refer to our general Complaints Policy
2. Our Contact Details
All GDPR-related complaints should be directed to us using the contact details below.
| Ab Wellness & Reflexology |
| 8 Birchwood, Kintore, Aberdeenshire, AB51 0QN |
| info@abwr.co.uk |
| Shona Tough [Address as above] |
| Privacy policy |
3. Your Rights Under UK GDPR
You have the following rights in relation to the personal data we hold about you:
- The right to access the personal data we hold about you (a Subject Access Request)
- The right to recDficaDon — to have inaccurate or incomplete data corrected
- The right to erasure (‘the right to be forgotten’) in certain circumstances
- The right to restrict processing of your personal data
- The right to data portability — to receive your data in a structured, machine-readable format
- The right to object to processing, including for direct marketing purposes
- The right to withdraw consent at any 1me where processing is based on your consent.
If you believe we have not respected one or more of these rights, you are entitled to raise a formal complaint using the procedure set out in this document.
4. How to Make a Complaint
Please submit your complaint in writing — either by post or by email — using the contact details in Section 2. To help us investigate your concern as efficiently as possible, please include:
- Your full name and preferred contact details
- A clear description of your concern and which data protection right(s) you believe have been affected
- The approximate date(s) when the issue occurred
- Any relevant reference numbers, correspondence or documents
5. Our Complaints Process
Once we receive your complaint, we will follow the five steps below. We are committed to handling all complaints promptly, fairly and confidentially.
Acknowledgement — within 30 days: We will acknowledge your complaint in writing within 30 days of receiving it, confirming that we have recorded it and will be investigated.
Requesting Further Information: If we need any additional details to fully investigate your complaint, we will contact you as soon as possible and explain what we need and why.
Investigation & Review: We will carry out a thorough and impartial review of your complaint. We will agree a realis1c 1mescale with you once we have all the necessary information, and we will keep you updated if there are any delays.
Decision & Outcome: We will communicate the outcome of our investigation to you clearly and in writing within one calendar month of receiving all the information needed (this may be extended by up to two further months for complex complaints — we will notify you if this is the case).
Closure or Escalation: If you are satisfied with the outcome, we will close your complaint. If you remain dissatisfied, you have the right to refer your complaint to the ICO free of charge (see Section 6 below).
6. Escalating Your Complaint to the ICO
If you remain dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) — the UK’s independent supervisory authority for data protection. This service is free of charge.
ICO website: https://ico.org.uk/make-a-complaint/
ICO helpline: 0303 123 1113 (Monday–Friday, 9am–5pm)
ICO postal address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF