Last updated: March 2026

1. Introduction

Arbori Wellbeing (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website or contact us. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Arbori Wellbeing is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact Sarah via the Arbori Wellbeing website.

3. Personal Data We Collect

We may collect identity data, contact data, communication data, technical data (such as IP address and browser type), usage data relating to how you use our website, and marketing preference data.

4. How We Collect Your Data

We collect data when you complete forms on our website, contact us directly, subscribe to services or newsletters, or use our website through cookies and analytics tools.

5. Lawful Bases for Processing

We process your personal data under the lawful bases of consent, contract, legal obligation, and legitimate interests, in accordance with UK GDPR.

6. How We Use Your Data

We use your data to respond to enquiries, provide services, manage our relationship with you, improve our website, send marketing communications where consent is given, and comply with legal obligations.

7. Cookies and Analytics

Our website uses cookies, including analytics cookies such as Google Analytics, to improve functionality and understand usage. You can manage or withdraw cookie consent at any time.

8. Data Sharing

We may share your data with trusted service providers, professional advisers, or authorities where legally required. All third parties are required to protect your data.

9. International Transfers

Where data is transferred outside the UK, appropriate safeguards such as adequacy regulations or standard contractual clauses are used.

10. Data Security

We use appropriate technical and organisational measures to protect your personal data, including secure servers and access controls.

11. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected or to meet legal requirements.

12. Your Rights

You have rights under UK GDPR including access, rectification, erasure, restriction, objection, data portability, and the right to withdraw consent or lodge a complaint with the ICO.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

14. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

15. Contact

If you have any questions about this Privacy Policy or your personal data, please contact Sarah via the Arbori Wellbeing website contact page.