PRIVACY · ACUITY BY KATYA

Privacy Notice

Privacy Notice

Privacy Notice

By Acuity Limited · Company number: 17472487 · hello@acuitybykatya.com · acuitybykatya.com

Last updated: 29 October 2026

1. About this notice

1. About this notice

By Acuity Limited (“Acuity”, “we”, “us” or “our”) provides personalised health and wellness strategy and advisory services.

We recognise that the information you share with us may be highly personal. This notice explains what information we collect, why we use it, how we protect it, and the choices and rights available to you.

By Acuity Limited is the data controller responsible for the personal information described in this notice.

2. Information we collect

2. Information we collect

Depending on your enquiry or engagement, we may collect:

  • Your name, contact details, location, time zone and professional circumstances.

  • Information about your health goals, medical history, symptoms, diagnoses, medications, supplements and lifestyle.

  • Medical reports, laboratory results and other documents you choose to provide.

  • Information from consultations, correspondence, calls and progress updates.

  • Information about appointments, services, payments and invoices.

With your knowledge and appropriate authority, we may also receive relevant information from healthcare practitioners or other professionals involved in your care.

We ask you to provide only information relevant to the service. Where questions are optional, you may leave them unanswered.

3. How we use your information

3. How we use your information

We use personal information to:

  • Respond to enquiries and arrange initial conversations.

  • Assess whether our services are appropriate for your needs.

  • Prepare for consultations and understand your health history and priorities.

  • Develop personalised strategies, recommendations and written materials.

  • Provide ongoing advisory support, monitor progress and adapt agreed plans.

  • Coordinate with external practitioners where this forms part of your engagement and you have authorised it.

  • Administer appointments, contracts, payments and business records.

  • Meet applicable legal obligations and manage complaints or disputes.

We do not sell client information or use health information for advertising.

4. Our legal basis for using your information

4. Our legal basis for using your information

Under UK data-protection law, we rely on different lawful bases depending on the purpose:

  • Taking steps at your request before entering into a contract, or performing our contract with you.

  • Compliance with legal obligations, including accounting and tax requirements.

  • Legitimate interests, where appropriate, such as responding to business enquiries and protecting the business against claims.

Health information receives additional protection under data-protection law. Where we rely on explicit consent to process your health information for Acuity’s assessment and advisory services, we ask you to provide that consent through a separate, affirmative statement.

You may withdraw consent by emailing hello@acuitybykatya.com. Withdrawal does not affect processing that was lawful before withdrawal. In some circumstances, we may need to retain limited information under another applicable legal basis.

If you do not provide information essential to an assessment or engagement, we may be unable to provide the requested service.

5. How we store and protect information

5. How we store and protect information

We use access-controlled business systems to collect and manage client information.

Our intended systems include:

  • Tally for intake questionnaires and submitted documents.

  • Google Workspace for business email, client documents and internal working records.

  • Calendly for scheduling.

  • Framer for our website.

We take proportionate steps to protect information, including limiting access, using appropriate account security measures, and restricting the sharing of client records.

We may change service providers as our business develops, provided appropriate data-protection arrangements are maintained.

6. Who may receive your information

6. Who may receive your information

Client information is accessed only where necessary to provide or administer our services.

We may share relevant information with:

  • Technology providers acting on our behalf under applicable contractual arrangements.

  • Healthcare practitioners or other external professionals, where you have authorised coordination or sharing.

  • Professional advisers, insurers, regulators or authorities where reasonably necessary or legally required.

We do not provide practitioners with unrestricted access to your records. Where sharing is needed, we aim to limit it to information relevant to the specific purpose.

7. International clients and transfers

7. International clients and transfers

Acuity may work with clients based outside the United Kingdom.

Some technology providers or recipients of information may process or access personal information internationally. Where a transfer is subject to UK data-protection transfer rules, we will ensure that an applicable adequacy arrangement, appropriate safeguard or lawful exception is available.

You may contact us for further information about the safeguards relevant to your information.

8. How long we retain information

8. How long we retain information

We retain personal information only for as long as reasonably necessary for its purpose, taking account of legal, contractual and potential claims-related requirements.

Our proposed retention approach is:

  • Enquiries that do not become engagements: normally up to 12 months after the last substantive contact.

  • Client health, consultation and strategy records: normally seven years after the engagement ends, subject to periodic review.

  • Accounting and financial records: for the applicable statutory retention period.

  • Complaints or legal disputes: for as long as reasonably necessary to resolve and document the matter.

Information may be deleted earlier where appropriate or retained longer where justified by a legal obligation or an ongoing claim.

9. Your rights

9. Your rights

Depending on the circumstances and applicable law, you may have rights to:

  • Request access to your personal information.

  • Ask us to correct inaccurate information.

  • Request deletion of information.

  • Ask us to restrict particular uses.

  • Object to processing based on legitimate interests.

  • Request portability of certain information.

  • Withdraw consent where processing relies on consent.

To exercise a right or raise a privacy concern, contact hello@acuitybykatya.com.

You can also raise a concern with the UK Information Commissioner’s Office at ico.org.uk.

10. Automated decisions

10. Automated decisions

We do not use solely automated decisions to determine whether to provide services or make significant decisions about your health.

11. Changes to this notice

11. Changes to this notice

We may update this notice when our services, technology providers or legal obligations change. The current version will be made available through our website.

12. Contact

12. Contact

By Acuity Limited

Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

hello@acuitybykatya.com · acuitybykatya.com