Privacy policy.

Depending on how you interact with us, we may collect:

• Identity & contact details — your name, email address and phone number when you book, enquire, or buy a membership or gift voucher.
• Booking information — the sessions, blocks and services you book and attend.
• Health screening information — the answers you give in the pre-session health questionnaire, including any conditions or medication you tell us about. This is special category data and is handled as described below.
• Payment information — payments are handled by our payment provider; we do not store your full card details.
• Website usage data — technical data such as pages visited and device type, collected through cookies as described in our cookie policy.

We use your data to:

• take and manage bookings, memberships and gift vouchers, and communicate with you about them — performance of a contract;
• screen for contraindications and run sessions safely — your explicit consent (see health data below);
• respond to enquiries, improve our services and website, and keep our records accurate — legitimate interests;
• send you marketing about our services where you have opted in — consent, which you can withdraw at any time;
• meet our legal and accounting obligations — legal obligation.

The health questionnaire exists for one purpose: to make sure hyperbaric oxygen therapy and our other services are safe and appropriate for you. We process it with your explicit consent, share it only with the team members who need it to run your session safely, and never use it for marketing.

You can withdraw consent at any time, though we cannot provide chamber sessions without a completed health screening.

We never sell your personal data. We share it only with:

• Service providers who process data on our behalf — such as our booking system, payment provider and email platform — under contracts that require them to protect it;
• Professional advisers such as accountants, insurers and lawyers where necessary;
• Authorities where we are required to by law.

Where a provider stores data outside the UK, we make sure appropriate safeguards recognised by UK law are in place.

We keep personal data only as long as we need it for the purposes above — booking and account records for as long as you remain a client and for a reasonable period afterwards; health screening records in line with our safety and insurance obligations; and financial records for the six years required by UK tax law. Data that is no longer needed is securely deleted.

Under UK data protection law you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email hello@hbotstudios.co.uk. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we would welcome the chance to resolve any concern with you first.

We use appropriate technical and organisational measures to protect your data — including access controls, encryption in transit, and limiting health information to the team members who need it. No system is perfectly secure, but we review our measures regularly and would notify you and the ICO of any breach as required by law.

We may update this policy from time to time — the latest version will always be published on this page, with the date above. Significant changes will be flagged to existing clients.

Questions? Email hello@hbotstudios.co.uk or get in touch through the contact page.