Data & Privacy Notice
Last updated: 10/09/2025
1. Introduction
This privacy notice explains how Bubbling Life™ (“we”, “us”, “our”) collects and processes your personal data when you use our website www.bubbling.life or engage with our services.
By providing us with your data, you confirm that you are over 13 years of age.
Controller: Bubbling Life™ is the data controller for your personal data. Contact: info@bubbling.life
It is important that the personal data we hold about you is accurate and up to date. Please let us know if your details change.
2. What Data We Collect and Why
We may process the following categories of personal data:
-
Communication Data – emails, messages, contact form submissions.
Purpose: replying to you, record keeping, legal claims.
Lawful basis: Legitimate interests. -
Customer Data – name, address, email, phone, purchase details, payment records.
Purpose: providing goods/services, transaction records.
Lawful basis: Contract. -
User Data – how you use the site, content you post or submit.
Purpose: operate and administer the website.
Lawful basis: Legitimate interests. -
Technical Data – IP address, browser type, device details, pages visited.
Purpose: site security and performance. Wix, our website host, may collect this data. We only receive aggregated, non-identifiable statistics. If additional analytics or marketing tools (e.g. Google Analytics, Meta Pixel) are enabled, lawful basis will be Legitimate interests (site administration) or Consent (non-essential cookies/ads). -
Marketing Data – preferences for marketing and communication.
Purpose: sending updates and offers.
Lawful basis: Consent, or Legitimate interests (soft opt-in for existing clients). -
Special Category Data (Health Information) – health history, symptoms, consultation notes, and results from functional or medical tests.
Purpose: to provide naturopathic and wellness services.
Lawful basis: Explicit consent.
If you do not provide required personal data, we may be unable to perform the contract (e.g. provide services).
We will only use your data for the purpose for which it was collected, or a compatible purpose. If we need to use it for a new unrelated purpose, we will explain the legal basis.
3. How We Collect Data
-
Directly from you (forms, bookings, emails, phone calls).
-
Automatically via cookies and similar technologies (see Cookies section).
-
From third parties: Wix (hosting), payment providers (Stripe, PayPal), labs (Genova, Regenerus, etc.), and analytics/advertising networks (if enabled).
4. Marketing Communications
We may send you marketing communications if:
-
you have requested information or purchased from us and have not opted out (soft opt-in), or
-
you have given explicit consent.
You can withdraw consent or opt out at any time (unsubscribe link in every message, or by emailing info@bubbling.life).
We do not share your data with third parties for their own marketing without your consent.
5. Disclosures of Your Personal Data
We may share your data with:
-
Service providers – Wix (hosting), secure IT/email support.
-
Payment providers – Stripe and PayPal (independent controllers).
-
Laboratories – where you choose functional testing (independent controllers).
-
Professional advisers – accountants, insurers, legal advisers.
-
Authorities – where required by law.
All processors we engage act under contract and must protect your data.
6. International Transfers
Some providers may process data outside the UK. Where this occurs, we rely on:
-
UK adequacy regulations (e.g. UK-US Data Bridge for certified US organisations), or
-
ICO-approved safeguards (International Data Transfer Agreement or UK Addendum to EU SCCs).
Details are available on request.
7. Data Security
We implement technical and organisational measures to prevent loss, misuse, alteration, or unauthorised access.
Access is limited to those with a business need. In the event of a suspected data breach, we will notify the ICO and affected individuals where legally required.
8. Data Retention
We only keep data as long as necessary:
-
Clinical/health records: minimum 8 years after last contact. For children, until the 25th birthday (26 if aged 17 at last contact), or longer if required by insurer/professional guidance.
-
Financial/transaction records: 6 years (tax purposes).
-
Marketing data: until you unsubscribe or after one year of inactivity.
Data is securely deleted or archived after these periods.
9. Your Legal Rights
You have the right to:
-
Access, correct, erase, restrict or transfer your data.
-
Object to processing.
-
Withdraw consent (where consent is the basis).
-
Complain to the ICO (www.ico.org.uk).
We aim to respond within one month. Requests may take longer if complex; we may need to verify your identity.
10. Third-Party Links
This website may link to third-party sites or plug-ins. We are not responsible for their privacy notices. Please review them when you leave our site.
11. Cookies
Our site is hosted on Wix.
-
Essential cookies: required for security and functionality.
-
Optional cookies (analytics/marketing): only used if you consent via our cookie banner.
These may collect IP address, browser type, and site usage. You can manage preferences at any time through our cookie banner or browser settings. For full details, see our Cookie Policy.
12. Contact
Data Protection Lead: Elle Fox
Email: info@bubbling.life