Privacy Policy
Last updated: 25 September 2026
How The Postpartum Suite collects, uses and protects your personal information, and what you can ask us to do with it.
1. Who we are
The Postpartum Suite provides non-clinical postpartum support and wellbeing treatments in clients' homes in London. We are the data controller for the personal information described in this policy. We decide what is collected and why.
| Company | The Postpartum Suite |
| Privacy contact | info@thepostpartumsuite.com |
This policy covers our website and booking page, our treatments, and our postpartum programmes.
2. The short version
- We collect what we need to come to your home and treat you safely, and very little else.
- We do not track you. No analytics, no advertising pixels, no third-party cookies, no profiling.
- We never sell or share your information for marketing, by anyone, ever.
- We keep financial records for six years because the law requires it. Most other things we delete sooner.
- You can ask us what we hold, ask us to correct it, or ask us to delete it.
3. What we collect
When you book a treatment on our website
| What | Why we need it |
|---|---|
| Your name | To know who we are treating and how to address you |
| Email address | To send your confirmation, reminder and any changes |
| Phone number | To reach you on the day if the practitioner is delayed or cannot get in |
| Your address, including postcode | Because we come to you |
| Treatment, add-ons, date and time | To provide what you booked and charge the right amount |
Payment information
Card payments are processed by Stripe. Your card number, expiry and security code go directly to Stripe and we never see or hold them. We receive confirmation that a payment succeeded, the amount, and the last four digits and card type.
Health information
To treat you safely we may need to know about your birth, your recovery, allergies, medication, skin conditions and anything else that affects whether a treatment is suitable. Health information is special category data under UK data protection law and is treated with extra care. We collect it from you by email, by phone or in conversation with your practitioner. Our online booking form does not ask for it today. We use it only to decide whether a treatment is safe and to adapt it to you, and it is shared only with the practitioner attending you.
Your baby and household
A practitioner necessarily learns things about your baby, your home and the people in it. We record only what the service requires. For a programme booking, that may include your due date or your baby's date of birth and an emergency contact. We do not build a profile of your family.
If you join our waitlist
When we are fully booked, you can leave your email address to hear when appointments become available. We ask only for the address, and only with your consent.
When you contact us
If you email, call or message us, we keep the correspondence and what it contains.
What we do not collect
We do not use analytics, advertising or tracking tools. We do not track which pages you visit, we do not fingerprint your device, and we do not buy or receive personal information about you from anybody else.
4. Why we are allowed to use it
| Purpose | Lawful basis |
|---|---|
| Taking your booking, sending confirmations and reminders, coming to your home and treating you | Contract. We cannot provide the service without it |
| Taking payment and issuing refunds | Contract |
| Keeping accounting and tax records | Legal obligation |
| Keeping our practitioners and clients safe, preventing fraud, and dealing with complaints or claims | Legitimate interests. Running the business responsibly, balanced against your privacy |
| Health information used to decide whether a treatment is safe | Explicit consent, which you may withdraw at any time. Where a treatment cannot proceed safely without it, withdrawing consent may mean we cannot treat you |
| Letting you know when appointments become available, if you join our waitlist | Consent, which you may withdraw at any time |
| Marketing emails, if we ever send them | Consent, with an unsubscribe link in every message |
| Using a photograph of you, your baby or your home | Consent, given separately in writing and withdrawable at any time |
5. Who we share it with
We use a small number of suppliers who process information on our behalf, under contract and on our instructions, and who may not use it for their own purposes. They provide the everyday services our booking runs on, such as scheduling, payment processing, email delivery, website hosting and general business software.
Beyond that, we share information only:
- with the practitioner attending you, so far as they need it;
- with professional advisers, insurers or our accountant where necessary;
- with emergency or healthcare services, where you or your baby need urgent help;
- where we are required to by law, or to protect someone from serious harm.
We do not sell your information, and we do not share it for anyone else's marketing.
6. Where your information is held
Some of the services we use are based outside the UK. Where information is transferred abroad we rely on the safeguards UK law requires, and you can ask us for details.
7. How long we keep it
| What | How long | Why |
|---|---|---|
| Payment and invoice records | 6 years from the end of the tax year | Required by HMRC |
| Appointment history in our diary | 2 years after your last appointment | Long enough to recognise a returning client |
| Health information | 2 years after your last appointment, or sooner on request | Kept in case you return, not indefinitely |
| Emails and messages | 2 years | Complaints, questions and what was agreed |
| Waitlist email addresses | Until we have told you appointments are available, or sooner on request | Used for the one thing you asked for, then deleted |
| Photographs used with consent | Until you withdraw consent | Yours to revoke |
| Server logs | 30 days | Security and fault-finding |
8. Cookies
Our booking page sets no analytics, advertising or tracking cookies, so you will not see a cookie banner.
When the card payment form loads, Stripe sets cookies necessary to process the payment and detect fraud. These are strictly necessary for a payment to work, and they do not track you across other websites. Stripe's own privacy policy is at stripe.com/privacy.
9. Your rights
Under UK data protection law you may:
- ask what we hold about you, and get a copy;
- have it corrected if it is wrong or incomplete;
- have it deleted, where we do not need to keep it;
- restrict how we use it, or object to our using it under legitimate interests;
- receive it in a portable form, or have it sent to someone else;
- withdraw consent at any time, where consent is what we relied on.
Email info@thepostpartumsuite.com and we will respond within one month. We will not charge you, and we will not treat you differently for asking.
If we cannot identify you from what you send us, we may ask for enough information to be sure. We are not going to hand your booking history to somebody else.
10. Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at any time.
Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
11. Keeping it safe
Payments are processed by Stripe and never pass through our own systems in readable form. Our booking page is served over an encrypted connection. Access to client information is limited to those who need it, and links sent in our emails are signed so that guessing a web address does not open somebody else's appointment.
No system is perfectly secure, but if a breach ever put you at serious risk we would tell you, and the ICO, without delay.
12. Changes to this policy
We may update this policy. The current version is always on our website, with the date it was last changed at the top. Where a change materially affects you, we will tell you directly.