PRIVACY POLICY

Last updated: 31 August 2026

Website: sobrietyandwellbeing.com

Privacy contact: admin@sobrietyandwellbeing.com

1. About this privacy policy

Sobriety & Wellbeing Ltd respects your privacy and is committed to protecting your personal information. This privacy policy explains what information we collect, why we use it, who we may share it with, how long we keep it and the rights available to you under UK data-protection law.

This policy applies when you visit our website, contact us by telephone, email, WhatsApp or an online form, enquire about alcohol home detox or recovery support, use our services, join a recovery-support arrangement, or ask us to introduce you to an independent professional or rehabilitation provider.

2. Who is responsible for your information?

Sobriety & Wellbeing Ltd is the data controller for the personal information it collects and uses for its own coordination, support, administration and referral activities.

Company number: 14618149

Registered office: 14 Gildea Close, Hatch End, Pinner, Middlesex, HA5 4SD

Email: admin@sobrietyandwellbeing.com

Telephone: 0800 002 5397

Independent doctors, pharmacies, therapists and rehabilitation providers are responsible for their own professional services and may act as separate data controllers. Their privacy policies and retention arrangements will apply to information they collect or receive for those services.

3. Information we may collect

We collect only information that is reasonably necessary for the relevant purpose. Depending on how you contact us and the service requested, this may include:

• Identity and contact information, including your name, date of birth, address, email address and telephone number.
• Information about your enquiry, circumstances, preferred contact method and communications with us.
• Health and wellbeing information relevant to an alcohol home-detox or recovery enquiry, such as alcohol use, withdrawal history, physical or mental health, medication, other substance use, allergies, previous treatment and support available at home.
• Information about a support person, family member or representative where this is relevant and appropriate.
• Service, appointment, referral and coordination records, including consents and the information needed to arrange an independent medical assessment, pharmacy dispensing, counselling or residential rehabilitation.
• Payment, invoice and transaction information.
• Feedback, complaints, safeguarding concerns and incident information.
• Technical information generated when you use the website, such as IP address, device and browser information, security logs and cookie preferences.

4. Sensitive health information

Information about health, alcohol use and treatment is special-category personal data and receives additional legal protection.

For routine enquiries, coordination and referrals, we will normally rely on your explicit consent under Article 9(2)(a) of the UK GDPR to use and, where necessary, share this information. We will ask for a clear and specific indication of consent. You may withdraw that consent at any time, although this will not affect processing already carried out lawfully and may mean that we cannot continue arranging or providing the requested service.

In limited circumstances, we may process sensitive information where necessary to protect someone’s vital interests, establish or defend legal claims, comply with the law, or meet safeguarding and regulatory responsibilities. We will use only the condition that is appropriate to the circumstances and will record our decision where required.

Please do not include more health information than is necessary in an initial website message. The contact form is not monitored as an emergency service. Call 999 in an emergency.

5. How we obtain information

Most information is provided directly by you during an enquiry, consultation or service. We may also receive relevant information from:

• A partner, family member, support person or representative who contacts us about you.
• An independent doctor, pharmacy, therapist, rehabilitation provider or other professional involved at your request.
• A referring organisation or professional.
• Website, communications, payment and security service providers.
• Public sources where this is lawful and relevant, such as a review you have chosen to publish publicly.

If you contact us about another person, please avoid providing unnecessary sensitive information. Where appropriate, you should have their permission. We will not normally disclose information to you about that person, or arrange a service for them, without their participation and appropriate consent.

6. Why we use your information and our lawful bases

Responding to enquiries and arranging services

We use information to respond to enquiries, provide consultations, understand the service requested, arrange the next steps and communicate about costs and availability. Our lawful basis is usually that the processing is necessary to take steps at your request before entering into a contract, or to perform a contract (Article 6(1)(b)).

Providing coordination, support and aftercare

We use relevant information to coordinate agreed arrangements, maintain contact, provide non-medical recovery support and aftercare, manage the client relationship and keep appropriate records. Our lawful basis is contract (Article 6(1)(b)). We may also rely on legitimate interests (Article 6(1)(f)) for proportionate administration, service quality and record keeping.

Independent medical, pharmacy, therapy and rehabilitation arrangements

Where you ask us to arrange or facilitate an independent service, we use and share the minimum necessary information to make that arrangement. Our Article 6 basis is normally contract or steps requested before a contract. For health information, we normally rely on your explicit consent under Article 9(2)(a).

Safety, safeguarding and emergencies

We may use or disclose information where reasonably necessary to respond to a serious and immediate risk, a safeguarding concern, or an emergency. Depending on the circumstances, our lawful bases may include vital interests (Articles 6(1)(d) and 9(2)(c)), legal obligation (Article 6(1)(c)) or legitimate interests (Article 6(1)(f)).

Legal, regulatory, complaints and financial administration

We use information to manage payments and accounts, respond to complaints, prevent or investigate misuse, obtain professional advice, establish or defend legal claims, and comply with tax, company, court, law-enforcement or regulatory obligations. Our bases may include contract, legal obligation and legitimate interests. Where sensitive information is necessary for legal claims, Article 9(2)(f) may apply.

Website operation and security

We may process limited technical information to operate, protect and improve the website, prevent fraud or misuse and diagnose faults. We rely on legitimate interests for strictly necessary and security-related processing. Non-essential analytics or marketing technologies are used only where the required consent has been obtained.

Marketing

We will send marketing emails, texts or WhatsApp messages to individuals only where we have valid consent or where the limited ‘soft opt-in’ applies and all legal requirements are met. Every marketing message will include a clear way to opt out. We will not use information about your health, alcohol use or treatment to target marketing without separate explicit consent.

7. Who we may share information with

We do not sell personal information. Where necessary, proportionate and lawful, we may share information with:

• An independent GMC-registered doctor asked to conduct a medical assessment or provide medical services.
• A pharmacy asked to dispense and deliver prescribed medication.
• Independent counsellors, therapists, recovery professionals or other professionals requested by you.
• Residential rehabilitation or treatment providers where you ask us to explore or arrange a placement.
• Your nominated support person or representative, within the permissions you have given.
• Website hosting, email, telephone, secure communications, payment, accounting, document-storage and IT-support providers acting under appropriate terms.
• Professional advisers, insurers, auditors, regulators, courts, law-enforcement bodies, safeguarding authorities or emergency services where disclosure is necessary and lawful.
• A purchaser or successor if the business is reorganised, sold or transferred, subject to appropriate confidentiality and data-protection safeguards.

Before sharing sensitive information for an ordinary referral or arrangement, we will normally explain who it will be shared with and obtain explicit consent. We share only what is reasonably necessary for the stated purpose.

8. Independent providers

Medical assessment and prescribing are provided separately by an independent doctor, and prescribed medication is dispensed by a pharmacy. Rehabilitation providers, therapists and other independent professionals also provide their services separately. Once information is provided to an independent provider, that provider is responsible for its own use of the information and should give you its own privacy information.

You may ask us for the identity of the proposed recipient before information is shared. Choosing not to allow necessary sharing may mean that the relevant assessment, dispensing, referral or professional service cannot be arranged.

9. WhatsApp and other communication services

If you choose to contact us through WhatsApp or another third-party communication service, that provider will process information under its own terms and privacy policy. Such services may process information outside the United Kingdom. If you prefer not to use WhatsApp, you may contact us by telephone or email.

Please avoid sending unnecessary medical documents, identification documents or highly sensitive information through ordinary messaging unless we have asked for it and explained the appropriate method.

10. International transfers

Some technology and communication providers may process or store information outside the United Kingdom. Where a restricted international transfer occurs, we will take reasonable steps to ensure that an approved safeguard applies, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful mechanism. You may contact us for further information about the safeguards relevant to your information.

11. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, safeguarding and complaint requirements. Our usual retention periods are:

• Enquiries that do not proceed to a service: normally up to 12 months after the last meaningful contact.
• Client coordination, support, consent and referral records: normally six years after the service or relationship ends.
• Financial, invoice and tax records: normally six years from the end of the relevant company financial year, or longer where required by law or an HMRC enquiry.
• Complaints, incidents and safeguarding records: normally six years after closure, or longer where a continuing risk, legal claim or regulatory requirement applies.
• Marketing records: until consent is withdrawn or there has been no engagement for 24 months. A minimal suppression record may be retained to make sure we honour an opt-out.
• Website and security logs held by us: normally up to 12 months, unless a shorter period is sufficient or a longer period is needed to investigate a security incident.

These periods may be shortened where information is no longer necessary, or extended where required to protect someone, comply with law, respond to a complaint, preserve evidence or establish or defend a legal claim. Independent doctors, pharmacies and other providers apply their own retention policies.

12. Cookies and similar technologies

The website may use strictly necessary cookies or similar technologies for security, essential functions and remembering privacy choices. These do not require consent where the legal exemption applies.

Analytics, advertising or other non-essential technologies will not be activated unless you have been given clear information and have provided the required consent. The website’s cookie banner or settings tool should provide the current list of non-essential technologies, their providers, purposes and durations, and allow you to accept, reject or change your preferences.

You can also control cookies through your browser, although blocking strictly necessary cookies may affect website functions.

13. Data security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, alteration or disclosure. Measures may include access controls, authentication, secure systems, staff confidentiality, data minimisation, appropriate processor agreements, backups and procedures for managing suspected personal-data breaches.

No internet, email or messaging system is completely secure. Please contact us promptly if you believe information has been sent to the wrong person or your communications with us may have been compromised.

14. Your data-protection rights

Depending on the circumstances and the lawful basis used, you may have the right to be informed about how your information is used; request access to the personal information we hold about you; ask us to correct inaccurate or incomplete information; and ask us to erase or restrict information in certain circumstances.

You may also have the right to object to processing based on legitimate interests and to direct marketing; receive information you provided in a portable format where the right applies; withdraw consent at any time where processing relies on consent; and complain to the Information Commissioner’s Office.

To exercise a right, email admin@sobrietyandwellbeing.com or write to the registered office shown above. We may ask for information needed to verify your identity. We normally respond within one month, although the law allows additional time for particularly complex or numerous requests. Some rights are subject to legal exemptions.

15. Complaints

Please contact us first if you have a concern so that we can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

Website: ico.org.uk

Telephone: 0303 123 1113

Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

16. Children

Our alcohol home-detox service is intended for adults. The website is not designed to collect information directly from children. If information about a child is relevant to a family or safeguarding situation, we will collect and use only what is necessary and lawful, with additional care appropriate to the circumstances.

17. Automated decision-making

Sobriety & Wellbeing does not make decisions producing legal or similarly significant effects about you solely by automated means. Decisions about medical suitability are made separately by the relevant independent clinician.

18. Changes to this policy

We may update this privacy policy when our services, systems, providers or legal obligations change. The latest version will be published on our website with its updated date. Where a change materially affects how we use information already collected, we will take reasonable steps to bring it to the attention of affected individuals before the new use begins.

19. Contact us

For privacy questions, requests or complaints, contact:

Sobriety & Wellbeing Ltd

Email: admin@sobrietyandwellbeing.com

Telephone: 0800 002 5397

Post: 14 Gildea Close, Hatch End, Pinner, Middlesex, HA5 4SD