Privacy Policy

Who we are

ProPartum Ltd (“ProPartum”, “we”, “us” or “our”) provides specialist 1-to-1 pre- and postnatal wellness programmes to employees of our corporate clients in the United Kingdom. We are committed to protecting your privacy and handling your personal data lawfully, fairly and transparently.

ProPartum Ltd is a company registered in England and Wales (company number 16897980) with its registered office at 24 Whitestone Road, Bishopston, Swansea, SA3 3DB. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, each as amended by the Data (Use and Access) Act 2025, ProPartum Ltd is the data controller of the personal data described in this policy, except where stated otherwise in section 4.

You can contact us about anything in this policy at hello@propartum.org or by post at the registered address above, marked for the attention of the Data Protection Lead.

Who this policy covers

This policy explains how we collect and use personal data relating to:

  • Website visitors — anyone who visits propartum.org or contacts us through the site;
  • Client contacts — HR, people and wellbeing professionals at organisations we work with or approach about our services;
  • Programme participants — employees of our corporate clients who take part in a ProPartum programme.

The personal data we collect

Website visitors and enquiries

  • Name, email address, telephone number, organisation and job title when you complete an enquiry or contact form, request our information pack, or email us;
  • Technical data such as IP address, browser type and pages visited, collected through cookies and similar technologies (see section 8).

Client contacts

  • Business contact details, correspondence and records relating to proposals, contracts, invoicing and account management;
  • Contact details obtained from publicly available professional sources (such as company websites or LinkedIn) where we reasonably believe our services are relevant to your role.

Programme participants

If you take part in a ProPartum programme through your employer, we collect the information needed to design and deliver a safe, personalised programme. This may include:

  • Name and contact details;
  • Health information (special category data) — such as pregnancy and birth details, postnatal recovery status, injuries, medical conditions relevant to exercise, GP or health professional clearance, and physical assessment results;
  • Programme records, session notes, and progress information;
  • Feedback you choose to provide about the programme.

We only collect health information directly from you, with your explicit consent, and only what is necessary to deliver your programme safely.

Purposes and lawful bases

Under the UK GDPR we must have a lawful basis for each use of your personal data. The table below sets out our purposes and the corresponding bases.

Purpose

Personal data used

Lawful basis

Responding to enquiries and providing our information pack

Contact details, correspondence

Legitimate interests (responding to and developing business enquiries)

Entering into and performing contracts with corporate clients

Client contact details, contractual and billing records

Performance of a contract; legitimate interests

Designing and delivering personalised wellness programmes

Participant contact details, health information, programme records

Performance of a contract (participant onboarding agreement); explicit consent for health data (Article 9(2)(a))

Ensuring programmes are safe and clinically appropriate

Health information, professional clearance records

Explicit consent (Article 9(2)(a))

Direct marketing to business contacts

Business contact details

Legitimate interests (promoting our services to relevant professionals), with the right to opt out at any time

Operating, securing and improving our website

Technical and usage data

Legitimate interests (running our website securely); consent for non-essential cookies

Complying with legal obligations (tax, accounting, insurance, regulatory requests)

Records as required by law

Legal obligation

Establishing, exercising or defending legal claims

Relevant records, including health data where necessary

Legitimate interests; Article 9(2)(f) for special category data

Where we rely on your consent, you may withdraw it at any time by contacting us. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, but it may mean we can no longer deliver your programme.

Who we share your data with

We do not sell your personal data. We share it only with:

  • Service providers (processors) acting on our instructions under written contracts — for example our website host, email provider, programme delivery and video platform [e.g. Stan Store], scheduling and payment systems;
  • Professional advisers such as our accountants, insurers and legal advisers, where necessary;
  • Regulators and authorities where we are required to do so by law;
  • Your employer — administrative information only, as described in section 4. Never your health data.

International transfers

We aim to keep your personal data in the UK. Some of our service providers may store or process data outside the UK (for example, in the United States). Where that happens, we ensure the transfer is protected by safeguards recognised under UK law, such as a UK adequacy decision or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses, applying the data protection test set out in UK law as amended by the Data (Use and Access) Act 2025. You can contact us for more information about the safeguards we use.

Cookies and similar technologies

Our website uses cookies and similar technologies. Strictly necessary cookies (and certain low-risk cookies permitted without consent under the Privacy and Electronic Communications Regulations, as amended) are used to make the site work and to collect limited first-party statistical information to improve it. We will ask for your consent before setting any other non-essential cookies, such as third-party analytics or marketing cookies, and you can change your preferences at any time through the cookie banner or your browser settings. Full details are set out in our separate Cookie Policy at [LINK].

How long we keep your data

  • Enquiries that do not lead to an engagement: up to 12 months from last contact;
  • Client contractual and financial records: 6 years after the end of the relevant tax/contract year, as required for tax and limitation purposes;
  • Participant programme and health records: [X] years after programme completion, in line with our professional indemnity insurance requirements and limitation periods for potential claims;
  • Marketing contact details: until you opt out or we have had no engagement for 24 months.

When personal data is no longer needed, we securely delete or anonymise it.

How we protect your data

We apply technical and organisational measures appropriate to the sensitivity of the data we hold, including encrypted storage and transmission, access limited to those who need it to deliver your programme, secure password management, and written data processing agreements with all service providers. Health information is held separately from general business records and is accessible only to the specialist delivering your programme.

Your rights

Under the UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you;
  • Rectification — ask us to correct inaccurate or incomplete data;
  • Erasure — ask us to delete your data in certain circumstances;
  • Restriction — ask us to limit how we use your data in certain circumstances;
  • Portability — receive data you provided to us in a structured, machine-readable format;
  • Object — object to processing based on legitimate interests, and to direct marketing at any time;
  • Withdraw consent — at any time, where processing is based on consent;
  • Complain — raise a complaint with us directly (see section 12) and with the Information Commissioner.

To exercise any of these rights, contact us using the details in section 1. We will respond within one month (this may be extended for complex requests, and paused while we verify your identity or clarify the scope of your request). We will not charge a fee unless a request is manifestly unfounded or excessive.

Complaints

If you have a concern about how we use your personal data, please contact us first at [privacy@propartum.org] or via the complaint form at [LINK]. In line with the Data (Use and Access) Act 2025, we will acknowledge your complaint within 30 days and respond to it without undue delay.

You also have the right to complain at any time to the UK’s data protection regulator, the Information Commissioner: ico.org.uk / 0303 123 1113 / Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Children

Our website and services are directed at businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

Changes to this policy

We may update this policy from time to time. The current version will always be available at propartum.org, and material changes will be highlighted on the site or notified to affected individuals where appropriate.