Privacy policy
Breathe® – Privacy Policy
1. Introduction
Breathe® (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, and safeguard your information when you interact with our website, store, and services.
Breathe® is operated by breathe-hbot limited, registered in England and Wales.
2. The Data We Collect
We collect only the information necessary to operate effectively and deliver a high-quality experience.
Information you provide
-
Name
-
Email address
-
Phone number
-
Billing and delivery address
-
Account or booking details
Transaction data
-
Purchase history
-
Payment details (processed securely via third-party providers such as Square)
Technical data
-
IP address
-
Device and browser type
-
Usage behaviour on our website
3. How We Use Your Data
We use your data to:
-
Process orders and manage bookings
-
Communicate with you regarding purchases or enquiries
-
Provide customer support
-
Improve our services, products, and user experience
-
Send relevant updates or marketing (only where you have opted in)
-
Maintain security and prevent fraud
4. Legal Basis for Processing
We process your data under the following lawful bases:
-
Contractual necessity – to fulfil your orders or bookings
-
Legitimate interests – to operate, improve, and secure our business
-
Consent – for marketing communications
-
Legal obligations – where required by law
5. Sharing Your Data
We only share your data where necessary to operate our business, including:
-
Payment providers (e.g. Square)
-
Scheduling platforms (e.g. Acuity Scheduling)
-
Delivery and logistics partners
-
IT, hosting, and website providers
-
Professional advisers
We do not sell or rent your personal data.
6. Data Retention
We retain your data only for as long as necessary:
-
To deliver services and manage your account
-
To comply with legal and financial obligations
-
To resolve disputes and enforce agreements
7. Data Security
We take reasonable technical and organisational measures to protect your data.
However, no digital system is completely secure. You provide your information at your own risk.
8. Your Rights
Under UK GDPR, you have the right to:
-
Access your personal data
-
Correct inaccurate information
-
Request deletion of your data
-
Restrict or object to processing
-
Withdraw consent at any time
-
Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise these rights, contact us at [insert email].
9. Cookies
We use cookies and similar technologies to:
-
Ensure website functionality
-
Analyse performance and usage
-
Improve your experience
You can control cookies through your browser settings.
10. Third-Party Services
We rely on trusted third-party platforms to operate effectively.
We are not responsible for their privacy practices, and you should review their policies where relevant.
11. International Transfers
Where data is processed outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR.
12. Changes to This Policy
We may update this Privacy Policy from time to time.
The latest version will always be available on our website.
13. Contact
For any privacy-related enquiries:
inhale@breathe-hbot.com
Your Rights Remain Protected
Nothing in this policy limits your statutory rights under UK data protection law.