Holistic iQ respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use and protect your information in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may collect and process the following types of personal data:

• Personal details such as name, email address, phone number and contact information 
• Account information such as login details and preferences 
• Eligibility information to confirm access to reduced cost services, which may include proof of means tested benefits, Blue Light Card, veteran status, disability related eligibility or similar documentation 
• Provider verification information such as qualifications, certifications, professional memberships and insurance details 
• Usage data such as pages visited, clicks and interactions with the platform 
• Marketing preferences including whether you opt in to receive updates and newsletters 
• Technical data such as cookies, device information and analytics data 

We only collect data that is necessary for the purposes outlined in this policy.

We use your personal data to:

• Provide access to the Holistic iQ platform 
• Connect eligible users with appropriate practitioners 
• Verify eligibility for reduced cost or accessible services 
• Review and verify practitioner profiles and credentials 
• Manage accounts and respond to enquiries 
• Send updates and marketing communications where consent has been given 
• Improve our website, services and user experience 
• Maintain platform safety, integrity and security 
• Comply with legal and regulatory obligations 

We process personal data under the following lawful bases:

• Consent – for marketing communications and optional cookies 
• Contract – to provide access to the platform and related services 
• Legal obligation – where we are required to comply with law 
• Legitimate interests – to operate, improve and secure the platform and ensure appropriate service delivery 
• Substantial public interest – limited to situations where processing special category data is necessary for equality of access and eligibility verification for reduced cost services 

Where we rely on legitimate interests, we ensure these do not override your rights and freedoms.

Some eligibility information may be classed as special category data under UK GDPR.

• We only collect this where strictly necessary to confirm eligibility for reduced cost services 
• We apply additional security measures to protect this data 
• Access is restricted to authorised personnel only 
• We follow data minimisation principles wherever possible 
• Where appropriate, we may verify eligibility without storing full documents, or we may delete documentation after verification has been completed 
• 
  

We do not sell or rent your personal data.

We may share data only where necessary with:

• Service providers who support platform operations (for example hosting, email or analytics providers) 
• Practitioners, but only where necessary to facilitate enquiries, bookings or services 
• Legal, regulatory or law enforcement bodies where required by law 
• Third parties involved in a business transfer such as a merger, acquisition or restructuring 

All third party processors are required to process your data securely, lawfully and only in line with our instructions.

We only keep personal data for as long as necessary for the purposes it was collected, including:

• Providing access to the platform and managing your account 
• Verifying eligibility for services 
• Meeting legal, tax or regulatory requirements 
• Maintaining legitimate business operations 

Where possible, we apply the principle of data minimisation and storage limitation.

Special category or verification data will be retained only for as long as necessary and may be securely deleted once verification has been completed, unless there is a lawful reason to retain it.

You have the following rights:

• The right to access your personal data 
• The right to rectification (correction of inaccurate data) 
• The right to erasure (also known as the right to be forgotten) 
• The right to restrict processing 
• The right to object to processing 
• The right to data portability 
• The right to withdraw consent at any time (where processing is based on consent) 

To exercise any of these rights, contact:
amber@holisticiq.co.uk

We may need to verify your identity before processing your request.

If you are unhappy with how we handle your personal data, you have the right to complain.

We would appreciate the chance to address your concerns first, so please contact us at:
amber@holisticiq.co.uk

You also have the right to lodge a complaint directly with the UK data protection authority:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/make-a-complaint/

We use cookies and similar technologies to:

• Improve website functionality 
• Analyse usage and performance 
• Enhance user experience 

You can control cookie preferences through your browser settings or our cookie banner.

For more information, please see our Cookie Policy.

We take appropriate technical and organisational measures to protect your data, including:

• Secure storage systems 
• Access controls and authentication measures 
• Encryption where appropriate 
• Regular review of security practices 

While we take all reasonable steps to protect your data, no system can be guaranteed as completely secure.

Our website may contain links to third party websites.

We are not responsible for the privacy practices of those websites and recommend reviewing their privacy policies before providing any personal data.

We may update this Privacy Policy from time to time.

Any changes will be posted on this page with an updated effective date.

If you have any questions about this Privacy Policy or how your data is handled, please contact:

amber@holisticiq.co.uk