Last updated: 1 October 2026
Vitalife Clinic Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal information we collect, why, what we do with it, and what rights you have over it, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy covers all three places you meet us: our website, our client portal, and our app. The previous version of this policy described the website only, and it no longer described what we actually hold.
Who we are
Vitalife Clinic Ltd is the data controller for the information described here. We're an online service, registered in England and Wales under company number 16777077, with our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We're registered with the Information Commissioner's Office under reference ZC220213.
You can reach us about anything in this policy at privacy@vitalifeclinic.co.uk, or in writing to our registered office, marked for the data protection contact.
If you only visit our website
If you fill in the contact or consultation enquiry form, we collect your name, your email address, your phone number if you give it, the service you're interested in if you pick one, and whatever you write in your message. We use it to reply to you and to arrange a consultation if you ask for one.
We don't set cookies on our website, we don't use advertising tools, and we don't use anything that follows you around other websites. Our forms are protected from automated spam by ALTCHA, which runs in your browser without tracking you.
We do keep our own count of which pages people visit, built so that it counts visits without identifying anybody, and the detailed records are deleted after 90 days.
There is one point where that stops being anonymous, and you should know about it. If you send us an enquiry, we link it to the visit that brought you to us, so we can see which of our articles and posts genuinely help people find us. That link carries your name, because the enquiry does. It's kept with your enquiry and deleted when that is.
Social media
We post to Vitalife Clinic's own Instagram and Facebook accounts from our own system rather than by hand, so that a post planned on a Monday can go out on a Thursday morning. We also read back how those posts did: how many people saw one, and how many saved it.
Those are counts about our posts, not about you. We don't read comments, followers, profiles or messages, and we've asked Instagram and Facebook for no permission that would let us. We hold no personal information from either of them.
If you follow us or comment on one of our posts, that sits with Instagram or Facebook under their own privacy policies, not with us.
If you become a client
Holding an account with us means we hold rather more, and you should know exactly what.
Your account. Your name, email address and phone number. Your password is stored only as a cryptographic hash, which means we can't read it. If you use a passkey, we hold a public key that can verify you but can't be used to sign in as you.
What you tell us about your health. This is the sensitive part and we treat it as such. Depending on what you use, it can include your answers to our health questionnaire, your daily or weekly check-ins, your wellness wheel scores, anything you record about weight, mood, sleep or energy, notes your coach makes about your care, and the results of any blood test you order through us.
Your messages. What you send your coach, and what they send you.
Your appointments. What you've booked, attended or missed, and for group sessions, that you were there. Where a session is held over video and a written summary is produced, that summary is kept with your record.
Your payments. What you've bought, what plan you're on, and when it renews. We never see or store your card details. Those go straight to whoever is taking the payment, and we hold only their reference and the outcome.
Your device, if you use the app. A push notification token, so we can send you a reminder, and ordinary technical information such as your IP address and the times you were signed in, which we keep to keep the service secure.
Two consents that are deliberately different
Worth saying plainly, because people assume the two work the same way:
If either of those ever changes, we'll tell you before it does, not after.
Why we're allowed to hold it
Automated tools
We use automated tools to help write some of what you see - a first draft of a programme for your coach, or a line of encouragement on your home screen. No decision about your care is made by a machine, and nothing about you is used to train anybody else's systems.
We don't do any automated decision-making that has a legal effect on you, and we don't profile you for advertising.
Who else sees it
We don't sell or rent your information, and we don't share it with anyone for marketing. We do use a small number of suppliers to run the service, each of which only gets what it needs:
Some of these are outside the UK. Where information leaves the UK we rely on the transfer safeguards the law provides, such as an adequacy decision or standard contractual clauses.
We'll also disclose information if the law requires it, or to protect somebody from serious harm.
How long we keep it
We keep your information for as long as you're a client, and then for six years after we last hear from you. That applies to the notes about your care and to our record of what you paid, and it is set by law and professional guidance rather than by us, so it isn't something we can shorten by agreement. Anything we're not required to keep is deleted when it's no longer needed.
Closing your account isn't the same as erasing your record, for the reason above. We explain the difference in our Terms, and if you ask us to erase what we hold, we'll do what the law allows and tell you plainly what we've had to keep and why.
Your rights
You have the right to ask us for a copy of what we hold, to have it corrected, to have it erased, to restrict or object to how we use it, to receive it in a portable form, and to withdraw a consent you've given. You can do any of those by emailing privacy@vitalifeclinic.co.uk, and we'll reply within one month.
If you're unhappy with how we've handled your information, please tell us first - but you can complain to the Information Commissioner's Office at any time, at ico.org.uk, or on 0303 123 1113.
Children
Our service is for adults. You need to be 18 or over to hold an account, and we don't knowingly collect information about children.
Keeping it safe
Access is limited to the people who need it to support you. Sensitive fields are encrypted in our database, traffic is encrypted in transit, and we keep backups so your record survives a failure. No system is perfect, and if something happens that puts your information at risk we'll tell you and the ICO as the law requires.
Changes to this policy
We may update this policy. Any change will be posted here with a new revision date, and where a change matters to you we'll tell you rather than leave you to find it.