Privacy Policy

Last updated: 13 October 2026

1. Introduction

At Heath Media, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, enquire about our services, apply to work with us, book a call, subscribe to our communications or otherwise interact with our business.

It also explains your rights under applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended.

Our website is https://heathmedia.co.uk.

2. Who We Are

Heath Media provides digital advertising services, training and educational content.

For the purposes of applicable data protection legislation, the organisation responsible for your personal information (the data controller) is:

Legal business name: BCH Online Ltd

Trading name: Heath Media

Registered address: 3 The Mill, High Street, Stourbridge, England, DY8 4FA

Contact email: support@heathmedia.co.uk

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

3. Information We Collect

We may collect and process the following categories of personal information.

Information you provide directly
When you contact us, complete a form, apply for our services, book a call or otherwise communicate with us, we may collect:

Your name and contact details, including your email address and telephone number.
Your business name, website and industry.
Your role or position within your business.
Information about your business, including revenue, advertising budgets, marketing activity and business goals.
Information you provide when applying to work with Heath Media.
Details of enquiries, correspondence and other communications.
Booking details and information provided in connection with meetings or consultations.
Information relating to services you purchase or receive from us.

Information collected automatically

When you visit our website, certain technical information may be collected, including:

Your IP address.
Browser type and device information.
Operating system.
Pages visited and interactions with our website.
Approximate geographic location derived from technical information.
Cookie identifiers and similar information, where applicable.

Some of this information may be collected automatically by our website hosting provider or other services necessary for the website to function.

Information from third parties

We may receive personal information from third-party platforms and service providers where you interact with our business through those services.

This may include information submitted through booking platforms, forms, training platforms, payment providers and other services we use to operate our business.

4. How We Use Your Information

We use personal information for the following purposes:

Responding to enquiries: To answer questions, respond to messages and provide information about our services.

Assessing applications: To review applications to work with Heath Media, understand your business requirements and determine which of our services may be appropriate.

Arranging consultations: To schedule and manage calls, meetings and other appointments.

Providing services: To deliver our advertising, training and other services, manage client relationships and fulfil contractual obligations.

Managing payments: To process payments, maintain financial records and administer transactions.

Communicating with you: To send service-related information, appointment confirmations, updates and other relevant communications.

Marketing: To send educational content, newsletters, updates or promotional communications where permitted by applicable law.

Operating our website: To maintain, secure, improve and troubleshoot our website and related systems.

Meeting legal obligations: To comply with applicable laws, regulations, accounting requirements and legitimate legal requests.

We do not sell or rent your personal information to third parties.

5. Our Legal Bases for Processing

Under UK data protection legislation, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on the following:

Contractual necessity

Where processing is necessary to provide services under a contract with you, or to take steps at your request before entering into a contract.

Legitimate interests

Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

These interests may include responding to business enquiries, assessing prospective clients, managing business relationships, preventing fraud and maintaining the security of our systems.

Consent

Where you have given consent for a specific activity, such as certain marketing communications or the use of non-essential cookies.

You may withdraw your consent at any time.

Legal obligations

Where processing is necessary to comply with legal, regulatory, tax or accounting requirements.

The lawful basis applicable to particular information will depend on why it was collected and how it is used.

6. Applications to Work With Heath Media

If you complete an application to work with Heath Media, we may ask for information about your business, including your current advertising activity, monthly revenue, advertising budget, business goals and contact details.

We use this information to understand your requirements, assess whether our services may be suitable and determine appropriate next steps.

Our application forms may use conditional questions and responses to guide applicants towards different outcomes.

For example, depending on the information provided, you may be invited to book a strategy call or directed towards educational resources that may be more appropriate for your circumstances.

This process is intended to help us assess service suitability and provide relevant recommendations.

We may retain application information for reasonable business follow-up and record-keeping purposes, subject to the retention principles explained below.

Submitting an application does not automatically subscribe you to marketing emails. Where marketing consent is required, we will request it separately.

7. Appointments, Calls and Meetings

We may use third-party scheduling and communication services, including Google Calendar and Google Meet, to arrange and conduct meetings.

When you book a call, we may collect your name, email address, appointment details and any additional information you choose to provide.

We use this information to manage bookings, send confirmations and reminders, prepare for meetings and follow up on enquiries.

Call recordings and transcripts

We may record or transcribe meetings for purposes including maintaining accurate records, reviewing client requirements, training and improving our services.

Where applicable, recordings and transcripts will be handled in accordance with data protection legislation, with access restricted to authorised individuals and retained only for as long as necessary.

8. Marketing Communications

We may send newsletters, educational resources, service updates and promotional communications where we are legally permitted to do so.

This may include communications about Heath Media's advertising services, training programmes and related offerings.

Where required by law, we will obtain your consent before sending marketing communications.

In other circumstances, we may rely on an applicable lawful basis and marketing exemption, subject to relevant legal requirements.

You can opt out of marketing emails at any time by clicking the unsubscribe link in an email or contacting us directly.

Opting out of marketing communications will not prevent us from sending necessary service-related or transactional messages.

9. Cookies and Website Tracking

Our website uses cookies and similar technologies to support its functionality, improve the visitor experience and, where enabled, measure website performance and marketing effectiveness.

Cookies are small files stored on your device when you visit a website.

Essential Cookies

We use cookies that are necessary for the operation, security and functionality of our website.

These may include cookies used by our website hosting provider, Wix.

Analytics and Performance Cookies

We may use analytics tools, including Google Analytics, to understand how visitors interact with our website, measure website performance and identify opportunities for improvement.

Advertising and Marketing Cookies

We may use advertising and measurement technologies provided by third parties, including Meta and Google, to measure advertising performance, track conversions, understand audience behaviour and support relevant advertising.

These technologies may collect information about your interactions with our website and may involve sharing certain information with the relevant service providers.

Cookie Consent and Preferences

Where required by applicable law, non-essential cookies and tracking technologies will only be activated after you have provided your consent.

You will be given information about the appropriate options to accept, reject or manage non-essential cookies.

You can change your cookie preferences through the controls made available on our website, where applicable, or manage cookies through your browser settings.

We review our use of cookies and tracking technologies periodically to ensure that appropriate information and controls remain available.

10. Third-Party Service Providers

We use trusted third-party services to operate our website, communicate with visitors, manage enquiries and deliver our services.

Depending on your interactions with us, these may include:

Wix: Website hosting, operation and related functionality.
Typeform: Application forms, questionnaires and enquiries.
Google Workspace: Email, document management, calendars, appointment scheduling and video meetings.
ActiveCampaign and/or MailChimp: Email communications, contact management and marketing automation.
Proposify: Creating, sending and managing business proposals, contracts and agreements, including electronic signatures.
Skool: Hosting or facilitating access to relevant training programmes and communities.
Payment and accounting providers: Processing transactions, issuing invoices and maintaining financial records.
Other professional service providers: Supporting our business operations where necessary.

Not every service will process every visitor's personal information.

Some third parties may act as independent data controllers for certain activities. Their own privacy policies may also apply.

We may also disclose information where required by law, necessary to protect our legal rights or connected with a legitimate business sale or restructuring.

11. International Data Transfers

Some of our service providers may store or process personal information outside the United Kingdom.

Where personal information is transferred internationally and UK data protection law requires safeguards, we will take appropriate steps to protect it.

Depending on the circumstances, these may include transfers to countries covered by UK adequacy regulations, the use of approved contractual safeguards or other lawful transfer mechanisms.

12. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including meeting legal, regulatory, accounting and contractual obligations.

Retention periods depend on the type of information and the reason it is processed.

For example:

Enquiries and applications: Retained for a period appropriate to handling the enquiry, potential follow-up and business record-keeping.
Client records: Retained for the duration of the business relationship and any additional period required for legal or contractual purposes.
Financial records: Retained in accordance with applicable tax and accounting requirements.
Marketing information: Retained while there is a lawful basis to continue communicating with you, subject to unsubscribe requests and periodic review.
Meeting records: Retained only for as long as necessary for their identified business purpose.
Technical and website data: Retained according to operational requirements and the relevant service providers' settings.

When information is no longer required, we will securely delete it, anonymise it or otherwise dispose of it appropriately.

13. How We Protect Your Information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.

These measures may include secure website connections, access controls, authentication, restricted access to business systems and the use of reputable service providers.

Access to personal information is limited to authorised employees, contractors and service providers who require it for legitimate business purposes.

Although we take appropriate precautions, no method of electronic transmission or storage can be guaranteed to be completely secure.

14. Your Data Protection Rights

Under UK data protection legislation, you may have the following rights, depending on the circumstances:

Right to be informed: To understand how your personal information is collected and used.
Right of access: To request a copy of the personal information we hold about you.
Right to rectification: To request correction of inaccurate or incomplete information.
Right to erasure: To request deletion of your personal information in certain circumstances.
Right to restrict processing: To request restrictions on how we use your information in certain circumstances.
Right to data portability: To receive certain information in a portable format where applicable.
Right to object: To object to certain processing activities, including processing based on legitimate interests.
Rights relating to automated decision-making: To receive applicable protections where qualifying solely automated decisions are made.
Right to withdraw consent: To withdraw consent where we rely on it.

You have the right to object at any time to the processing of your personal information for direct marketing purposes.

To exercise your rights, please contact us using the details provided in this policy.

We may need to verify your identity before responding to certain requests.

We will respond in accordance with applicable legal requirements.

15. Children's Privacy

Our website and services are primarily intended for businesses, professionals and adults.

We do not knowingly seek to collect personal information directly from children through our general business enquiry and application processes.

If you believe a child has provided us with personal information inappropriately, please contact us so we can review the situation and take appropriate action.

16. External Websites and Platforms

Our website may contain links to external websites, social media platforms, training communities and other third-party services.

We are not responsible for the privacy practices of independently operated third-party websites.

We encourage you to review the privacy policies of those services before providing personal information.

17. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can investigate and respond.

You also have the right to complain to the UK Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Information Commissioner's Office

Website: https://ico.org.uk

Telephone: 0303 123 1113

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our website, services, technology, business practices or legal obligations.

Any updates will be published on this page, and the date at the top of the policy will be revised.

Where changes are significant and additional notification is legally required, we will take appropriate steps to inform affected individuals.

19. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights or would like further information about how we process personal information, please contact:

Heath Media

Email: support@heathmedia.co.uk

Address: 3 The Mill, High Street, Stourbridge, England, DY8 4FA