Privacy and cookie policy

1. Who We Are

NextGen Wellness Limited ("we", "us", "our") is a wellness therapy business registered in England and Wales. Our registered address is Unit 3, Prow Park, TR7 2SX.

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We collect and process the following personal data about you:

Through our contact form (via our website)

  • Full name

  • Email address

  • Phone number

Through our booking system (Acuity Scheduling)

  • Full name

  • Email address

  • Phone number

  • Appointment history and session preferences

  • Payment information (processed securely by Acuity's payment partners)

  • A completed consent waiver confirming you do not have certain medical conditions that would contraindicate our therapies — this is collected as a condition of using our services and constitutes special category data under UK GDPR, processed on the basis of your explicit consent

Through payment processing

  • Payment card details (processed securely — we do not store your full card details)

  • Billing information

3. How We Use Your Personal Data

We use your personal data for the following purposes:

To deliver our services (Lawful basis: Contract)

  • To process and manage your bookings

  • To send appointment confirmations and reminders

  • To process payments for services

To communicate with you (Lawful basis: Legitimate Interests / Consent)

  • To respond to enquiries submitted through our contact form

  • To send you marketing emails and newsletters about our services, offers, and wellness updates (only where you have given your consent)

To comply with legal obligations (Lawful basis: Legal Obligation)

  • To maintain accurate financial and business records as required by law

4. Marketing Communications

We may send you marketing emails and newsletters about our services if you have opted in to receive them. You can unsubscribe at any time by clicking the unsubscribe link in any of our emails, or by contacting us directly at the details below.

We will never sell your data to third parties for marketing purposes.

5. Third-Party Services

We use trusted third-party platforms to help us operate our business. These providers may process your personal data on our behalf:

  • Acuity Scheduling — for appointment booking and client management (acuityscheduling.com)

  • Squarespace — for hosting our website (squarespace.com)

  • Payment processors — for secure handling of payment transactions

Each of these providers has their own privacy policy and data protection obligations. We ensure that any third parties we work with provide sufficient guarantees around data security and UK GDPR compliance.

6. Cookies

Our website uses cookies — small text files stored on your device — to help it function correctly and to improve your experience. These may include:

  • Essential cookies — necessary for the website to operate

  • Analytics cookies — to help us understand how visitors use our site (where applicable)

  • Third-party cookies — set by Squarespace and Acuity Scheduling

When you first visit our website, you will be asked for your consent to use non-essential cookies. You can manage or withdraw your cookie consent at any time through your browser settings or our cookie banner.

7. How Long We Keep Your Data

We will only retain your personal data for as long as necessary to fulfil the purposes it was collected for, including for legal, accounting, or reporting requirements:

  • Client and booking records: up to 7 years (as required for financial record-keeping)

  • Contact form enquiries: up to 2 years from the date of enquiry

  • Marketing consent records: until you unsubscribe or withdraw consent

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — to request a copy of the personal data we hold about you

  • Right to rectification — to ask us to correct inaccurate or incomplete data

  • Right to erasure — to request deletion of your personal data in certain circumstances

  • Right to restrict processing — to ask us to limit how we use your data

  • Right to data portability — to receive your data in a structured, commonly used format

  • Right to object — to object to processing based on legitimate interests or for direct marketing

  • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the details in Section 10 below. We will respond within one month of receiving your request.

9. How We Protect Your Data

We take data security seriously and have appropriate technical and organisational measures in place to protect your personal data against unauthorised access, loss, or disclosure. This includes:

  • Secure, password-protected access to all client management systems

  • Use of reputable, GDPR-compliant third-party platforms

  • Encrypted payment processing — we do not store full payment card details

10. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact us:

NextGen Wellness Limited

Unit 3, Prow Park, TR7 2SX

11. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection regulator:

Information Commissioner's Office (ICO)

Website: www.ico.org.uk

Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO, so please do get in touch with us first.

Cookie Policy

Last updated: 15 March 2026

1. What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work correctly, improve performance, and provide information to website owners.

2. How We Use Cookies

Our website is hosted on Squarespace and uses cookies for the following purposes:

Essential Cookies

These cookies are necessary for our website to function and cannot be switched off. They include:

  • Session cookies that keep you logged in or remember your preferences during a visit

  • Security cookies that help protect the site from fraudulent activity

  • Cookies required for our Acuity Scheduling booking system to function

Analytics Cookies

Squarespace may set cookies to help us understand how visitors interact with our website, such as which pages are visited most often. This data is aggregated and anonymous — it cannot be used to identify you personally.

Third-Party Cookies

Our website uses the following third-party services which may set their own cookies:

We do not use advertising cookies, social media tracking pixels, or any other marketing cookies.

3. Your Cookie Choices

When you first visit our website, you will be shown a cookie consent banner. You can choose to accept or decline non-essential cookies at that point.

You can also manage cookies at any time through your browser settings. Most browsers allow you to:

  • View the cookies stored on your device

  • Block all or certain types of cookies

  • Delete cookies when you close your browser

Please note that blocking essential cookies may affect how our website and booking system function.

4. More Information

For more information about cookies and how to manage them, visit www.allaboutcookies.org or the ICO's guidance at ico.org.uk/cookies.

If you have any questions about our use of cookies, please contact us using the details in the Privacy Policy above.

This policy should be reviewed periodically and updated as necessary. Please check our website for the most current version.