Privacy Policy

Last updated: 9 August 2026

This policy explains how I Am Well Ltd collects, uses, stores and protects personal information.

It applies when you:

  • Visit this website

  • Complete a form or download a resource

  • Join a mailing list

  • Book or attend a session

  • Purchase a service or resource

  • Contact I Am Well

  • Take part in a workplace, school or community programme

Who Is Responsible for Your Information?

I Am Well Ltd is the data controller responsible for the personal information covered by this policy.

Company number: 15945127
Registered office: 128 City Road, London, EC1V 2NX
Email:hello@iamwell.org.uk
Website:www.iamwell.org.uk

Information We May Collect

Depending on how you interact with I Am Well, we may collect:

  • Your name, email address, telephone number and other contact details

  • The organisation, school or community group you represent

  • Information about the service, session or resource you have requested

  • Booking dates, attendance information, payments and transaction references

  • Messages, enquiries, feedback and correspondence

  • Mailing-list choices and marketing preferences

  • Access requirements or information needed to support your participation

  • Relevant health information, allergies, medication, pregnancy, injuries or other information you choose to provide before a therapy or wellbeing activity

  • A child or young person’s name, age, support needs and relevant consent information where necessary

  • Photographs, recordings or testimonials where separate permission has been obtained

  • Website information collected through cookies and similar technology, such as device type, browser information and how the website is used

I Am Well does not directly store your complete payment-card details. Payments are processed by the relevant payment provider.

Where We Receive Information From

Most information is provided directly by you through forms, bookings, emails, payments or conversations.

We may also receive information from:

  • A parent or carer booking for a child

  • An employer, school or organisation arranging a session

  • A referral or community partner

  • Booking, payment and communication platforms used to provide the service

Where someone provides information about another person, they should have a valid reason and authority to do so.

How We Use Personal Information

We may use personal information to:

  • Respond to enquiries and discuss suitable services

  • Manage bookings, payments, attendance and cancellations

  • Deliver workshops, appointments, programmes and digital resources

  • Send confirmations, access links, reminders and important service information

  • Understand and support access, health or safety requirements

  • Communicate with parents, carers, schools, employers and organisational contacts

  • Keep financial, administrative and safeguarding records

  • Respond to complaints, concerns or legal claims

  • Improve services and understand how the website is being used

  • Send occasional news and updates where permission has been given

  • Protect the security of the website, business and participants

We will not use personal information for an unrelated purpose without a valid reason or, where required, telling you first.

Our Lawful Reasons for Using Information

Depending on the circumstances, we rely on one or more of the following lawful bases:

Contract
When information is needed to arrange, provide or manage something you have booked or purchased.

Consent
When you choose to join a mailing list, agree to the use of a photograph or testimonial, or provide certain optional information.

Legitimate interests
When it is reasonably necessary to respond to enquiries, operate and improve the business, protect services, maintain appropriate records or communicate with organisational contacts, provided your rights do not override those interests.

Legal obligation
When information must be retained or shared to comply with tax, accounting, safeguarding or other legal responsibilities.

Vital interests
In a genuine emergency where using or sharing information may be necessary to protect someone’s life or immediate safety.

Health information and other special-category information receive additional protection. Where this information is needed, we will usually rely on your explicit consent. Another legally permitted condition may apply where necessary for safeguarding, legal obligations or vital interests.

Who We May Share Information With

I Am Well does not sell or rent personal information.

Information may be shared only where necessary with:

  • Website, form and email providers, including Squarespace

  • Payment processors, including Stripe

  • Booking and scheduling providers, including TidyCal

  • Online meeting providers, including Zoom

  • Secure email, calendar, document-storage and administrative service providers

  • Accountants, insurers, legal advisers or other professional advisers

  • Schools, employers or partner organisations where necessary to deliver an agreed service

  • Emergency services, safeguarding bodies, regulators or public authorities where required by law or necessary to protect someone

  • A new owner or operator if the business is reorganised, transferred or sold

Service providers may only use information to perform the services they provide and must protect it appropriately.

Information Processed Outside the UK

Some technology providers used by I Am Well operate internationally and may process information outside the United Kingdom.

Where this happens, we use providers that rely on recognised legal safeguards, such as UK adequacy regulations, approved contractual protections or another lawful transfer mechanism.

You can contact hello@iamwell.org.uk if you would like more information about the safeguards used for an international transfer.

How Long We Keep Information

We keep personal information only for as long as it is needed for the reason it was collected.

Our usual retention periods are:

  • Enquiries that do not become bookings: up to 12 months.

  • Booking, payment, accounting and tax records: usually six years from the end of the financial year they relate to.

  • Attendance, consultation and service records: for as long as required for insurance, safeguarding, professional, contractual or legal purposes.

  • Marketing details: until you unsubscribe or withdraw your consent. We may keep a minimal record to ensure we respect your preference.

  • Photographs, recordings and testimonials: until permission is withdrawn or they are no longer needed.

  • Safeguarding information: for as long as necessary to meet our safeguarding and legal responsibilities.

  • Website and cookie information: according to our Cookie Policy and the settings of the relevant provider.

We review the information we hold and securely delete or anonymise it when it is no longer needed.

How We Protect Information

We use reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

These measures include:

  • Limiting access to people who genuinely need the information.

  • Using passwords and two-factor authentication where available.

  • Using reputable payment, booking, communication and storage providers.

  • Keeping devices, systems and software appropriately protected and updated.

  • Sharing only the information necessary for the particular purpose.

No online system can be guaranteed to be completely secure. If a personal-data breach occurs, we will investigate it and notify affected individuals and the Information Commissioner’s Office where required by law.

Children and Young People’s Information

We provide some services for children and young people and take additional care with their personal information.

Information may be collected from a parent, carer, school, community organisation or directly from the young person where appropriate. This may include contact details, age, attendance information, accessibility needs, relevant health information and anything needed to support their safety and participation.

We will:

  • Collect only the information genuinely needed.

  • Explain how information will be used in clear, age-appropriate language.

  • Obtain consent from a parent or carer where appropriate.

  • Keep children’s information securely and limit who can access it.

  • Use photographs, recordings or testimonials only where suitable permission has been given.

  • Never use a child’s details for direct marketing without the appropriate consent.

Information may be shared without consent where necessary to protect a child or young person, respond to a safeguarding concern or meet a legal obligation.

Marketing and Updates

We will send marketing emails or occasional updates only where you have chosen to receive them or where the law otherwise permits us to do so.

Signing up for updates is optional. Downloading a resource, making an enquiry or booking a service does not automatically add you to our mailing list unless you separately choose to subscribe.

You can unsubscribe at any time by:

After you unsubscribe, we may keep a minimal record of your preference so that we do not contact you again by mistake.

We do not sell your details or share them with other organisations for their own marketing.

Cookies and Website Information

Our website uses cookies and similar technologies to help it function, understand how it is being used and support certain features.

Some cookies are necessary for the website to work. Optional cookies, including analytics or marketing cookies, will be used only according to the choices you make through our cookie banner.

You can review or change your cookie choices through the website’s cookie settings.

Further information about the cookies we use, their purpose and how long they remain on your device can be found in our Cookie Policy.

Your Data Protection Rights

Depending on the circumstances and the reason we are using your information, you may have the right to:

  • Ask for a copy of the personal information we hold about you.

  • Ask us to correct information that is inaccurate or incomplete.

  • Ask us to delete your information.

  • Ask us to restrict how your information is used.

  • Receive certain information in a portable format.

  • Object to particular uses of your information.

  • Withdraw your consent at any time where we rely on consent.

  • Make a complaint about how your information has been handled.

The right to object to the use of your information for direct marketing is absolute.

Some rights are not available in every situation, and we may need to retain certain information to meet legal, safeguarding, contractual or financial obligations.

To exercise any of these rights, email hello@iamwell.org.uk. We may need to confirm your identity before completing your request.

Data Protection Complaints

If you are concerned about how we have collected, used, stored or shared your personal information, please contact us at:

Email: hello@iamwell.org.uk
Subject: Data Protection Complaint

We will:

  • Acknowledge your complaint within 30 days.

  • Investigate it fairly and without undue delay.

  • Keep you informed if the investigation takes longer than expected.

  • Explain the outcome and any action we have taken.

You also have the right to raise your concern with the Information Commissioner’s Office:

Website: www.ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

Automated Decision-Making

I Am Well does not use personal information to make solely automated decisions that produce legal or similarly significant effects.

Changes to This Privacy Policy

We may update this Privacy Policy when our services, systems or legal responsibilities change.

The latest version will always be published on this page, with the date of the most recent update shown at the top.

Where a change significantly affects how we use personal information, we will take reasonable steps to let affected people know.

Contact Us

If you have a question about this policy or how your personal information is handled, contact:

I Am Well Ltd
128 City Road
London
EC1V 2NX

Email: hello@iamwell.org.uk
Website: www.iamwell.org.uk
Company number: 15945127