Update date August 1, 2026

Privacy policy

1. Introduction

CEO Health Limited (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, engage with our services, complete questionnaires or intake forms, communicate with us, or otherwise interact with our business.

We process personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (“PECR”), and any subsequent legislation replacing or supplementing them.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

2. Our Contact Details

CEO Health Limited

7 Bell Yard

London

WC2A 2JR

United Kingdom

Email: info@ceohealth.org

Website: https://ceohealth.org

3. Information We May Collect

Depending on your interaction with us, we may collect and process the following categories of information:

Identity Information

  • Full name
  • Date of birth
  • Gender
  • Nationality (where relevant)

Contact Information

  • Email address
  • Telephone number
  • Postal address

Healthcare Information

  • Medical history
  • Health questionnaires
  • Intake forms
  • Lifestyle information
  • Nutritional information
  • Supplement protocols
  • Biometric information
  • Blood, stool, saliva and urine tests and laboratory results
  • Functional health assessments
  • Consultation records
  • Health goals and progress records
  • Information provided by healthcare professionals with your authority

Professional and Programme Information

  • Programme enrolment information
  • Service history
  • Appointment records
  • Progress tracking information
  • Communications relating to services provided

Wearable Technology Information

Where you choose to connect wearable devices or tracking platforms, we may collect information relating to:

  • Activity levels
  • Sleep metrics
  • Recovery metrics
  • Heart rate information
  • Training information
  • Other wellness and performance-related data

Technical Information

  • IP address
  • Browser type and version
  • Operating system
  • Device information
  • Website usage information
  • Cookie identifiers

Financial Information

  • Payment records
  • Transaction history
  • Instalment payment information where applicable

We do not ordinarily store complete payment card details.

Correspondence Information

We may retain records of communications between you and us, including:

  • Emails
  • Messages
  • Contact form submissions
  • Consultation notes
  • Customer service enquiries
  • Complaints and feedback

4. How We Collect Information

We may collect personal information:

Directly From You

Including when you:

  • Contact us
  • Book consultations
  • Complete questionnaires
  • Submit intake forms
  • Participate in programmes
  • Provide wearable-device information
  • Make payments
  • Subscribe to newsletters
  • Request information
  • Communicate with us

From Third Parties

Including:

  • Laboratories
  • Healthcare professionals
  • Referral partners
  • Technology platforms used in connection with our services

Where appropriate, we will obtain any required permissions before receiving such information.

Automatically

Certain information may be collected automatically through cookies, analytics tools, website logs, and similar technologies.

5. How We Use Your Information

We may use your information for the following purposes:

  • Delivering our services
  • Developing personalised recommendations and programmes
  • Reviewing laboratory results
  • Monitoring progress
  • Responding to enquiries
  • Managing appointments
  • Maintaining client records
  • Processing payments
  • Providing customer support
  • Improving our services
  • Monitoring website performance
  • Complying with legal obligations
  • Protecting our business and clients
  • Establishing, exercising, or defending legal claims

We will only process personal information where we have a lawful basis to do so.

6. Health Information and Special Category Data

Certain information we collect may constitute special category personal data under UK GDPR, including information relating to physical health, mental health, medical history, biometric data, ethnicity, and other health-related matters.

Where such information is processed, we do so only where permitted by applicable law and where necessary for the provision of health-related services, the administration of programmes, compliance with legal obligations, the protection of vital interests, the establishment or defence of legal claims, or other lawful purposes permitted by applicable legislation.

7. Who We May Share Information With

We may share information with:

  • Healthcare professionals involved in your care
  • Laboratories and testing providers
  • Technology service providers
  • Professional advisers
  • Insurers
  • Payment processors
  • Regulatory authorities
  • Law enforcement agencies
  • Courts and tribunals
  • Government authorities where legally required

We do not sell your personal information.

Information will only be shared where reasonably necessary, legally permitted, or required.

8. How We Store Your Personal Information

We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

Clinical records, intake forms, health questionnaires, laboratory results, treatment plans, consultation notes, programme records, and related health information are stored within the Healthie platform, which incorporates industry-standard security measures and is designed to support HIPAA compliance. We use Healthie as a secure client management and health records system. Access to client information is restricted to authorised personnel and service providers who require access in order to deliver our services, administer programmes, and support our business operations.

As part of our services, certain wearable-device information, including data obtained from WHOOP and similar wearable technologies, may be stored and processed separately using cloud-based business systems, including Google Workspace services. This information is used solely for the purposes of monitoring progress, analysing trends, generating reports, and supporting the delivery of our services. Wearable-device information may be maintained separately from health records stored within Healthie.

Payment information is processed through secure third-party payment providers. We do not ordinarily store complete payment card information.

Personal information will be retained only for as long as reasonably necessary to fulfil the purposes for which it was collected, including service delivery, business administration, legal compliance, safeguarding obligations, insurance requirements, dispute resolution, regulatory obligations, and the establishment, exercise, or defence of legal claims.

Where information is no longer required, we may securely delete, anonymise, archive, or otherwise dispose of such information in accordance with our internal retention practices and applicable legal requirements.

Whilst we take reasonable steps to protect personal information and use reputable third-party service providers, no system of electronic transmission, cloud storage, or internet communication can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security of information transmitted to or stored by us.

We reserve the right to retain information where necessary to comply with legal obligations, professional obligations, insurance requirements, complaint investigations, safeguarding responsibilities, business record-keeping requirements, dispute resolution procedures, or the establishment, exercise, or defence of legal claims.

Nothing in this Privacy Policy shall be interpreted as creating any obligation on us to retain records for any specific period beyond that which we reasonably consider necessary for lawful business, legal, regulatory, professional, contractual, insurance, or operational purposes.

9. Marketing Communications

Where permitted by law, we may send you newsletters, educational materials, service updates, offers, and other communications.

You may unsubscribe from marketing communications at any time by following the unsubscribe instructions included within communications or by contacting us directly.

Service-related communications may continue where necessary for the administration of services you have requested.

10. Cookies and Analytics

Our website uses cookies and similar technologies.

Cookies help us:

  • Operate the website
  • Improve website performance
  • Analyse website usage
  • Enhance user experience
  • Improve website security

Strictly necessary cookies are always active.

Non-essential cookies will only be used where you have provided consent through our cookie management tools.

We may use analytics providers, including Google Analytics, to better understand how visitors interact with our website.

For further information, please refer to our Cookie Policy.

11. International Transfers

Some of our service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure appropriate safeguards are implemented in accordance with applicable data protection legislation.

12. Your Data Protection Rights

Subject to applicable law, you may have the right to:

  • Request access to your personal information
  • Request correction of inaccurate information
  • Request deletion of information in certain circumstances
  • Request restriction of processing
  • Object to processing
  • Request transfer of information to another provider
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a supervisory authority

We may require proof of identity before responding to requests.

13. Complaints

If you have concerns regarding our handling of personal information, please contact us first so that we may attempt to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Website: www.ico.org.uk

14. Changes to This Privacy Policy

We may amend this Privacy Policy from time to time.

Any revised version will be published on our website and will take effect from the date of publication.

We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions regarding this Privacy Policy or our processing of personal information, please contact:

Email: info@ceohealth.org

CEO Health Limited

7 Bell Yard

London

WC2A 2JR