Privacy Policy

1. Who we are

This website is operated by Healthcare Ventures Group Limited, trading as Lyfe Health (“we”, “us”, “our”).

Registered address: 20 Badminton Road, Downend, Bristol, England, BS16 6BQ

Company number: 12569976

ICO registration reference: ZA797364

Contact email: [email protected]

We are the data controller for the personal data described in this policy, meaning we decide how and why it is used.

2. What personal data we collect

When you complete the form on this page, we collect:

  • Your first and last name

  • Your email address

  • Your phone number

  • Attribution data submitted via hidden fields alongside your form entry: marketing campaign parameters (UTM Source, Medium, Campaign, Platform), the page URL you submitted from, and ad click identifiers (Meta's fbclid and Google's click ID) used to match your enquiry to the ad that brought you here

  • Technical data such as your IP address, browser type, and how you interact with this website, collected automatically via cookies and similar technologies (see Section 6)

If you go on to book an appointment, TM3, our practice management provider, will separately collect your preferred appointment time as part of that booking step — see Section 7.

We do not knowingly collect any personal data beyond what is listed above, or what you choose to tell us directly.

3. How we collect your data

We collect data when you:

  • Complete a form on this website (for example, to book an appointment, request an assessment, or ask a question)

  • Contact us directly by phone, email, or messaging

  • Browse this website, via cookies and tracking technologies

4. How we use your data and our legal basis

We use your personal data to:

Purpose

Legal basis

Respond to your enquiry or booking request

Legitimate interests, taking steps at your request before entering into a service arrangement with you

Contact you about the appointment, assessment, or event you requested

Legitimate interests / performance of a contract

Send you marketing communications, where you have opted in

Consent

Improve this website and our services

Legitimate interests

Comply with legal or regulatory obligations

Legal obligation

Where we rely on legitimate interests, we have considered that this processing is necessary and proportionate, and does not override your rights. You can ask us for details of this assessment at any time using the contact details above.

5. Special category data (health information)

[IF the form for this funnel does NOT ask about any injury, condition, or symptom:] This form only asks for your first name, last name, email, and phone number, plus hidden attribution fields (see Section 2) — it does not ask you to describe any injury, condition, or symptom, so we do not collect health information through it.

[IF the form DOES ask about an injury, condition, or symptom — replace the paragraph above with:] Where you tell us about an injury, condition, or symptom as part of booking an assessment or diagnostic service, this counts as special category (health) data under Article 9 UK GDPR. We only collect this where necessary to provide the service you have requested, and we rely on [Article 9(2)(h) — provision of health care / assessment, or your explicit consent — confirm which applies] as our lawful basis for processing it. This data is only used to prepare for and deliver your appointment or assessment, and is subject to the additional safeguards described in Section 13.

6. Cookies and tracking technologies

The ICO finalised updated guidance on the use of storage and access technologies (cookies, tracking pixels, device fingerprinting and similar technologies) under PECR on 29 April 2026. That guidance treats tracking pixels the same way as cookies: non-essential ones, including advertising and conversion pixels, need the visitor's prior opt-in consent before they fire, not just a policy that mentions them after the fact. Separately, narrow new PECR exemptions (for things like statistical/analytics-only and website-appearance cookies) took effect on 5 February 2026 under the Data (Use and Access) Act 2025, but these do not cover advertising or marketing tracking of any kind.

Booking an appointment through this page takes you to TM3, our practice management provider's own self-hosted booking system. TM3's cookies are not listed in the table below, as they sit on TM3's own self-hosted domain and are covered by TM3's own privacy and cookie disclosures, not this funnel's.

This website uses the following cookies and similar technologies:

Tool

Cookie ID

Domain

Category

Duration

Purpose

GA4

_ga

Funnel domain

Analytics

400 days

Distinguishes unique visitors for Google Analytics

GA4

ga<container ID>

Funnel domain

Analytics

Session

Maintains the current GA4 session state

GA4

_gid

Funnel domain

Analytics

24 hours

Identifies the visitor for session tracking

Google Ads (Conversion Linker)

gclaw

Funnel domain

Advertising

90 days

Detects the ad click ID (gclid) in the URL and attributes a conversion back to the ad that drove it — the core conversion tracking cookie

Google Ads

gclau

Funnel domain

Advertising

90 days

Browser identifier supporting conversion measurement alongside gclaw

Meta Pixel

_fbp

Funnel domain

Advertising

90 days

Tracks visits across sites to deliver Meta advertising

Meta Pixel

_fbc

Funnel domain

Advertising

90 days

Stores the ad click ID to attribute a conversion to the ad that drove it

Cloudflare

__cf_bm, __cf_logged_in, cf_clearance, CF_VERIFIED_DEVICE_*

Funnel domain

Essential

30 min–1 year

Bot management and security checks; confirms the visitor has passed Cloudflare's checks

GHL (native)

msgsndr_id

Funnel domain

Essential

14 days

GoHighLevel's own visitor identifier for the funnel

GHL (native)

cookie-config, current_url

Funnel domain

Essential

1 year

GHL's own site configuration and current-page tracking, required for the funnel to function

Stripe

__stripe_sid

Funnel domain

Essential

30 minutes

Fraud prevention during an active payment session

Stripe

__stripe_mid

Funnel domain

Functional

1 year

Device identifier Stripe uses for fraud risk scoring across sessions

Essential cookies are necessary for the website to function and do not require consent. All other categories above (Analytics, Advertising, Functional) are not essential and will only be set with your consent, which you can give or withdraw at any time via the cookie consent banner on this page.

7. Who we share your data with

We may share your data with:

  • GoHighLevel (GHL), who hosts this funnel and processes your data on our behalf to manage bookings and communications

  • TM3, our practice management provider, who processes your booking data on our behalf to schedule and manage your appointment (via TM3's own self-hosted booking system)

  • Stripe, who processes payment data on our behalf if you pay online

  • Cloudflare, who provides security and bot-management services for this website

  • Civet Media Ltd, our marketing agency, who processes your data on our behalf to run and measure our advertising campaigns

  • Meta and Google, where you have consented to advertising cookies, so that we can measure and improve our advertising

  • [ANY OTHER THIRD PARTY specific to this service]

We do not sell your personal data to anyone.

8. International transfers

Some of the providers listed in Section 7 may store or process data outside the UK, for example in the United States. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an equivalent recognised transfer mechanism, so your data continues to be protected to UK standards.

9. How long we keep your data

We keep your personal data for 26 months from your last contact with us, after which it is securely deleted, unless we are required to keep it for longer to meet a legal, accounting, or regulatory requirement.

10. Your rights

Under UK data protection law, you have the right to:

  • Access the personal data we hold about you

  • Ask us to correct inaccurate data

  • Ask us to delete your data

  • Ask us to restrict how we use your data

  • Object to our use of your data

  • Receive your data in a portable format

  • Withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact us using the details in Section 1. If you are unhappy with how we have handled your data, you also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

11. Marketing communications

We will only send you marketing messages by email, text, or phone where you have given consent, or where the law otherwise permits it. You can opt out at any time by contacting us or using the unsubscribe link in any marketing message.

12. Children

This website and our services are intended for adults. We do not knowingly collect personal data from children.

13. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Where we hold health information under Section 5, we apply additional access controls so that this data is only visible to those involved in delivering your appointment or assessment.

14. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.

15. Contact us

If you have any questions about this policy or how we handle your data, contact us at [email protected] or 20 Badminton Road, Downend, Bristol, England, BS16 6BQ.

Last updated

[DATE]