GDPR Policy

Privacy & GDPR Policy

Altus Living Ltd

At Altus Living Ltd, your privacy is important to us. This Privacy and GDPR Policy outlines how we collect, use, store, and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Altus Living Ltd
Company Registration Number: 12659706
Registered Address: St Mary's House, Netherhampton, Salisbury, Wiltshire, United Kingdom, SP2 8PU
Contact: hello@thealtuslife.co.uk.

What Data We Collect

We may collect and process the following types of personal data:

  • Identity Data: Name, date of birth

  • Contact Data: Email address, phone number, postal address

  • Health & Lifestyle Data: Any information shared in consultations, health questionnaires, or fitness assessments

  • Payment Data: Card or billing details (handled securely via third-party processors)

  • Usage Data: How you use our website, services, and booking systems

  • Marketing Data: Preferences for receiving updates and newsletters

How We Collect Your Data

We collect personal data when you:

  • Sign up for services, classes, or events

  • Complete health and lifestyle forms

  • Book appointments or purchase packages

  • Communicate with us by email or phone

  • Visit our website and consent to cookies

  • Opt in to receive marketing communications

Why We Collect Your Data

We use your data to:

  • Deliver personalised services, coaching, and wellness plans

  • Communicate updates and respond to your enquiries

  • Manage bookings, payments, and attendance

  • Ensure your safety and wellbeing during sessions

  • Meet our legal and contractual obligations

  • Send marketing communications (with your consent)

Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

  • Consent – for sending newsletters or optional communications

  • Contract – to provide services you’ve requested

  • Legal Obligation – where required by law

  • Legitimate Interest – for business operations such as service delivery and client support

Data Storage & Security

We take appropriate technical and organisational measures to protect your data:

  • Password-protected systems and encrypted data

  • Secure third-party platforms (e.g., booking software, payment gateways)

  • Access limited to authorised team members only

We retain data only as long as necessary for the purposes collected and in accordance with legal requirements.

Third-Party Sharing

We do not sell your data.
We may share your data with trusted third-party providers who assist in service delivery (e.g., payment processors, email platforms), under strict confidentiality agreements and data protection standards.

Your Data Rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate or incomplete data

  • Request erasure of your data (where applicable)

  • Object to or restrict processing

  • Withdraw consent at any time

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please email: