Privacy Policy

1) Introduction

Welcome to Metabolize Health & Fitness Ltd, a weight loss clinic service exclusively for customers in the United Kingdom. We are committed to safeguarding your privacy and ensuring that your personal information is protected. We are registered with the UK Information Commissioner’s Office as a Data Controller (Reg No. ZB611832). This Privacy Policy outlines how we collect, use, disclose, and secure your information. Metabolize (The Company) provides you (the “User”) with access to the online and mobile services including but not limited to, metabolize.co.uk and all associated subdomains (the “Website”). Our privacy policy is designed in accordance with numerous national and international regulation frameworks, including (but not limited to) the General Data Protection Regulation (“GDPR”), the UK Data Protection Act 2018 and the UK General Data Protection Regulation (“UK GDPR”).

2) Information We Collect

We may collect the following types of information:

2.1) Personal Information

• Name
• Email address
• Phone number
• Address
• Date of birth
• Medical history and health-related information
• Evidence of your starting and ongoing body weight
• We will require access to your NHS health record (Summary of Care Record)

2.2) Payment Information

When you make a purchase on our website, we may collect payment information, which is processed securely by our payment processing provider, Stripe.

3) How We Use Your Information

Your information is used for the following purposes:

• Providing our weight loss clinic services
• Processing and fulfilling your orders
• Communicating with you about our services
• Personalizing your experience
• Enhancing our website and services
• Complying with legal obligations
• Communicating with your GP

4) Data Security

We take reasonable steps to protect your information through physical and electronic safeguards designed to enhance security. However, no electronic transmission or storage of information is entirely secure, and we cannot guarantee absolute security or privacy of your information.

5) Personal Information Retention

In line with the ICO’s ‘Principle 5’ and article 5 of GDPR and the UK GDPR, we retain personal information only as long as necessary for the purposes for which it was collected. Considering that your personal information may be used for research purposes (as described in section 3), Metabolize will retain information for up to 10 years after you cease using our services. After this period, your information will be deleted. As noted in section 7, you can request the deletion of your personal information at any time.

6) Sharing Your Information

We do not share your personal information with third parties, except in the following cases:

• With your explicit consent
• To comply with legal requirements
• With service providers who assist in delivering our services

7) Cookies and Tracking Technologies

We use cookies and tracking technologies as detailed in our Cookie Policy, which explains their use and purpose.

8) Your Rights

You have the following rights regarding your personal information:

• Access, correct, or delete your personal information
• Object to the processing of your data
• Withdraw your consent (where applicable)
• Request data portability
• Lodge a complaint with the relevant data protection authority

If you have any concerns regarding your personal information, please contact the Metabolize Privacy and Security Officer at hello@metabolize.co.uk.
If you are based in the UK or the European Economic Area and we do not comply with any of the below, you have the right to complain to the ICO or your local Supervisory Authority, and to seek a judicial remedy.

• Restrictions: You have the right to request in writing that we do not disclose certain information about you. To request a restriction, please contact the Privacy and Security Officer.
  
• Confidential Communications: You have the right to request in writing that we limit the way we communicate information regarding your health and healthcare services, such as stopping email notifications about your progress through the Metabolize program. We will make every effort to accommodate your request.
  
• Access: You have the right to inspect and copy your personal information held by us. Normally, we will provide access within one month of your request. To request your personal information, please request a subject access form via email hello@metabolize.co.uk, fill it in, and return it to us with copies of documents that confirm your identity. Please do not send original documents. More details on acceptable identification documents are included in the form. You can email your completed form and electronic copies of your identification documents to: hello@metabolize.co.uk. We will endeavour to respond promptly, within one month.
  
• Deletion: You have the right to request that we delete all information collected by the System about you by emailing the Metabolize Privacy and Security Officer.
  
• Amendment: You have the right to request that we correct any incorrect personal information, such as an incorrect date of birth in our records. We will amend your information within one month of your request and notify you when the amendment is made. We may deny your request if we believe your personal information is accurate and complete.
  
• Personal Information Portability: You have the right to obtain and reuse your personal information from Metabolize for your own purposes across different services. You can request your data via the Privacy and Security Officer.
  
• Objection: You have the right to object to processing based on legitimate interests, direct marketing, and processing for scientific research and statistics. To request an objection, please contact the Privacy and Security Officer.
  
• Automated Decision Making & Profiling: You have the right not to be subject to a decision based on automated processing that produces a legal effect or a similarly significant effect on you. To opt out of automated decision making & profiling, please contact the Privacy and Security Officer.

Before meeting your request, we may ask for reasonable information to verify your identity. Please note there are exceptions and limitations to each of these rights, and while changes will be reflected in active user databases within a reasonable time, we may retain information for backups, archiving, fraud prevention, abuse analytics, legal obligations, or other legitimate reasons.

9) Changes to this Privacy Policy

We reserve the right to update this Policy and to make the revised Policy effective for all personal information created or received before the effective date of the revised Policy. If you are a registered user, we will notify you of changes via the email address we have on file.
Questions about revisions to this Policy can be addressed to the Privacy and Security Officer at hello@metabolize.co.uk. This Policy will be updated promptly if there are any material changes.

Effective Date: This Policy is effective as of August 2024.

If you have any questions or concerns about our Privacy Policy or data practices, please contact us at: hello@metabolize.co.uk