Update date August 1, 2026
CEO Health Limited (“we”, “us”, “our”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, engage with our services, complete questionnaires or intake forms, communicate with us, or otherwise interact with our business.
We process personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (“PECR”), and any subsequent legislation replacing or supplementing them.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy.
CEO Health Limited
7 Bell Yard
London
WC2A 2JR
United Kingdom
Email: info@ceohealth.org
Website: https://ceohealth.org
Depending on your interaction with us, we may collect and process the following categories of information:
Where you choose to connect wearable devices or tracking platforms, we may collect information relating to:
We do not ordinarily store complete payment card details.
We may retain records of communications between you and us, including:
We may collect personal information:
Including when you:
Including:
Where appropriate, we will obtain any required permissions before receiving such information.
Certain information may be collected automatically through cookies, analytics tools, website logs, and similar technologies.
We may use your information for the following purposes:
We will only process personal information where we have a lawful basis to do so.
Certain information we collect may constitute special category personal data under UK GDPR, including information relating to physical health, mental health, medical history, biometric data, ethnicity, and other health-related matters.
Where such information is processed, we do so only where permitted by applicable law and where necessary for the provision of health-related services, the administration of programmes, compliance with legal obligations, the protection of vital interests, the establishment or defence of legal claims, or other lawful purposes permitted by applicable legislation.
We may share information with:
We do not sell your personal information.
Information will only be shared where reasonably necessary, legally permitted, or required.
We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
Clinical records, intake forms, health questionnaires, laboratory results, treatment plans, consultation notes, programme records, and related health information are stored within the Healthie platform, which incorporates industry-standard security measures and is designed to support HIPAA compliance. We use Healthie as a secure client management and health records system. Access to client information is restricted to authorised personnel and service providers who require access in order to deliver our services, administer programmes, and support our business operations.
As part of our services, certain wearable-device information, including data obtained from WHOOP and similar wearable technologies, may be stored and processed separately using cloud-based business systems, including Google Workspace services. This information is used solely for the purposes of monitoring progress, analysing trends, generating reports, and supporting the delivery of our services. Wearable-device information may be maintained separately from health records stored within Healthie.
Payment information is processed through secure third-party payment providers. We do not ordinarily store complete payment card information.
Personal information will be retained only for as long as reasonably necessary to fulfil the purposes for which it was collected, including service delivery, business administration, legal compliance, safeguarding obligations, insurance requirements, dispute resolution, regulatory obligations, and the establishment, exercise, or defence of legal claims.
Where information is no longer required, we may securely delete, anonymise, archive, or otherwise dispose of such information in accordance with our internal retention practices and applicable legal requirements.
Whilst we take reasonable steps to protect personal information and use reputable third-party service providers, no system of electronic transmission, cloud storage, or internet communication can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security of information transmitted to or stored by us.
We reserve the right to retain information where necessary to comply with legal obligations, professional obligations, insurance requirements, complaint investigations, safeguarding responsibilities, business record-keeping requirements, dispute resolution procedures, or the establishment, exercise, or defence of legal claims.
Nothing in this Privacy Policy shall be interpreted as creating any obligation on us to retain records for any specific period beyond that which we reasonably consider necessary for lawful business, legal, regulatory, professional, contractual, insurance, or operational purposes.
Where permitted by law, we may send you newsletters, educational materials, service updates, offers, and other communications.
You may unsubscribe from marketing communications at any time by following the unsubscribe instructions included within communications or by contacting us directly.
Service-related communications may continue where necessary for the administration of services you have requested.
Our website uses cookies and similar technologies.
Cookies help us:
Strictly necessary cookies are always active.
Non-essential cookies will only be used where you have provided consent through our cookie management tools.
We may use analytics providers, including Google Analytics, to better understand how visitors interact with our website.
For further information, please refer to our Cookie Policy.
Some of our service providers may process information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure appropriate safeguards are implemented in accordance with applicable data protection legislation.
Subject to applicable law, you may have the right to:
We may require proof of identity before responding to requests.
If you have concerns regarding our handling of personal information, please contact us first so that we may attempt to resolve the matter.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Website: www.ico.org.uk
We may amend this Privacy Policy from time to time.
Any revised version will be published on our website and will take effect from the date of publication.
We encourage you to review this Privacy Policy periodically.
If you have any questions regarding this Privacy Policy or our processing of personal information, please contact:
Email: info@ceohealth.org
CEO Health Limited
7 Bell Yard
London
WC2A 2JR