Last updated: January 2026

ESP WELLNESS (“we”, “us”, “our”) operates www.esp-wellness.com (the “Website”). ESP WELLNESS is the Data

Controller for the purposes of applicable data protection legislation, including the UK General Data Protection Regulation

(UK GDPR). We are committed to protecting your privacy and handling your personal data with transparency and care.

This policy describes what data we collect, how we use it, how we protect it, and your rights.

1. What Information We Collect

1.1.Information You Provide Voluntarily

• Contact details: name, email address, phone number

• Professional details: company, role, project information when you enquire about services

• Billing / payment information when you engage paid services

• Communications: messages via contact forms, consultations, newsletters

1.2.Information Collected Automatically

• Log data: IP address, browser type & version, pages accessed, time/date, referrer URL

• Cookies and tracking technologies (e.g. analytics, performance, preferences)

1.3.Other Data from Third Parties

• If you log in via third-party services or use linked accounts, or when necessary enrichment from partners (with legal

basis)

• Publicly available sources, when relevant and permitted

2. How We Use Your Information

We use personal data to:

• Respond to your enquiries, provide consultancy, project planning, quotes, and services

• Process payments and contractual obligations

• Send you information about our services, promotions, updates (only if you opt in)

• Improve our Website: analytics, performance, user experience

• Prevent fraud or unauthorised use

3. Legal Basis for Processing

Depending on context, we process your data under legal bases including:

• Your consent (e.g. subscribing to newsletter)

• Performance of a contract (services you requested)

• Our legitimate interests (website operation, improving services, security), balanced against your rights

4. Sharing & Disclosure of Information

We may share your data when necessary:
• With service providers / contractors who support our operations (hosting, payments, analytics) under non-disclosure
and data protection obligations
• With legal authorities if required by law or to protect our rights
• In connection with business transactions (mergers, acquisitions), only under confidentiality and legal protections

5. Cookies, Tracking & Your Choices

• We use cookies / similar technologies for functionality, performance, and analytics.
• Cookie usage is governed by a separate Cookies Policy, and users can manage preferences via our cookie consent
banner.
• You can disable some cookies in browser settings, but that may affect Website functionality.

6. Data Retention

• We retain personal data only as long as necessary for the purposes stated, to comply with legal obligations, contractual
requirements, and legitimate business needs.
• After project completion or when no longer required, data is securely archived or deleted.

7. Security & Protection

• We implement appropriate technical and organisational measures (encryption, access controls, secure servers) to
protect personal data.
• While no system is completely secure, we take reasonable steps to safeguard information against unauthorised access,
loss, or disclosure.

8. Your Rights

Depending on your jurisdiction, you have rights including:
• Access to your data
• Rectification of inaccurate data
• Deletion (“right to be forgotten”) under certain conditions
• Restriction or objection to processing
• Data portability where applicable
• Withdrawal of consent at any time where consent is the legal basis
To exercise any of these rights, please contact us using the details below. We may request verification of identity and will
respond within one month, in accordance with applicable law.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your
data has been handled unlawfully.

9. Marketing Communications

You will only receive marketing communications where you have opted in.
• You may unsubscribe or opt out at any time using links provided in emails or by contacting us directly.

10. Children’s Data

• Our services are intended for adults and professional clients.
• We do not knowingly collect personal data relating to children under the applicable legal age.

11. International Transfers

• Where personal data is transferred outside the UK, appropriate safeguards such as standard contractual clauses or
equivalent protections are in place.

12. Automated Decision-Making

• ESP WELLNESS does not use automated decision-making or profiling that produces legal or significant effects.

13. Changes to This Privacy Policy
• We may update this Privacy Policy from time to time.
• Significant changes will be notified via the Website or email where appropriate

14. Contact Us
If you have questions, concerns, or wish to exercise your data protection rights, please contact:
ESP WELLNESS
Email: info@esp-wellness.com
Address: First Floor, 1 Bishop Meadow Road, Loughborough, LE11 5TH, United Kingdom