Privacy Policy
Balance & Bloom
Privacy Policy
Last updated: June 2026
1. Who We Are
Balance & Bloom Health is operated by Hannah Needham, a sole trader based in Hampshire, United Kingdom. We can be contacted at info@balanceandbloomhealth.co.uk
We are registered with the Information Commissioner's Office (ICO). Our ICO registration number is C1971865.
2. What Data We Collect
We collect the following personal data:
-
Contact details — name, email address, phone number
-
Delivery address — collected via PayPal at the point of purchase, to send your HTMA test kit
-
Health information — details you share via our intake form, including symptoms, lifestyle, medical history, and health goals. This is classed as special category data under UK GDPR and is processed only with your explicit consent
-
Payment data — processed securely by PayPal. We do not store your card or payment details on this website
-
Technical data — website usage information collected via cookies and Wix analytics
3. How and Why We Use Your Data
We use your data to:
-
Process your order and send your HTMA test kit
-
Provide personalised HTMA analysis and written reports
-
Communicate with you about your results and ongoing support
-
Comply with our legal obligations
-
Improve our website and services
Our lawful bases for processing are: performance of a contract (booking and service delivery), legal obligation, and explicit consent for special category health data.
4. Who We Share Data With
We share data only where necessary with the following trusted third parties:
-
Wix — our website platform and hosting provider (data processed in accordance with Wix's privacy policy)
-
PayPal — secure payment processing and collection of delivery address
-
Mineral Check UK — our HTMA laboratory partner. Your hair sample and name are shared with Mineral Check solely for the purpose of analysis. They do not use your data for any other purpose
-
Email providers — used to communicate with you regarding your service
We do not sell, rent, or trade your personal data to any third party.
5. Your Rights Under UK GDPR
You have the right to:
-
Access the personal data we hold about you
-
Request correction of inaccurate data
-
Request deletion of your data
-
Withdraw consent at any time (where consent is the lawful basis)
-
Object to processing
-
Lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113
To exercise any of these rights, email us at info@balanceandbloomhealth.co.uk. We will respond within 30 days.
6. Data Retention
We retain client data for 3 years following the completion of your service, after which it is securely deleted. Payment records are retained for 7 years in line with HMRC requirements.
7. Security
We take reasonable technical and organisational measures to protect your personal data. Health information shared via our intake form is stored securely and accessed only by Hannah Needham for the purpose of preparing your report.
8. Cookies
Our website uses cookies to enhance your experience and analyse traffic. You can manage cookie preferences via your browser settings.
9. Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated via email or a notice on our website. This policy was last updated in June 2026.
10. Contact
For any questions about this policy or your data, please contact us at info@balanceandbloomhealth.co.uk