Green Oxygen Hyperbarics Limited ("we", "us", "our") is committed to protecting your personal data. This policy explains what we collect, how we use it, where we store it, and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The short version: We only collect the information we need to deliver your hyperbaric oxygen therapy sessions and run our business. Your account data is stored on UK servers and is never sold or shared with marketers. A small amount is handled by our payment and email providers under strict, UK GDPR-recognised safeguards. You can request a copy or deletion at any time by emailing us.
Green Oxygen Hyperbarics Limited operates a wellness studio offering low-pressure hyperbaric oxygen therapy (HBOT) at:
Jubilee House, Third Avenue, Globe Park, Marlow, SL7 1EY
Phone: 07378 271411
Email: tommy@greenoxygenhbot.com
Green Oxygen Hyperbarics Limited is a company registered in England and Wales, company number 16891588, with its registered office at the address above. We are not currently VAT-registered.
For the purposes of UK GDPR, we are the data controller for the personal data we hold about you.
So we can see roughly how many people visit the site each day, our server works out a one-way code for your visit and records only that code, the calendar date, and the time it first arrived. Nothing is stored on your device for this - no cookie, and nothing kept in your browser. The code is calculated from your IP address and browser type, combined with that day's date and a secret key; those details are used only for the moment it takes to work the code out, and are never stored or written to any log. Only the finished code is kept, and it cannot be turned back into your IP address. Because the date forms part of it, the code is different every day, so it cannot be used to recognise you from one day to the next. We do not record your location, which pages you view, or where you came from, and we do not use third-party analytics like Google Analytics or Meta Pixel.
What we collect and why. Your health and safety screening record - either the screening form you complete and sign yourself, or the record a member of staff makes if we screen you over the phone - and your signed informed consent and participation agreement (see our Terms & Conditions), together with any update you give us about a change in your health, record what you have told us about your health. This is special-category health data under UK GDPR. We use it for three purposes only: to keep you safe in the chamber, to give to the emergency services if you ever need them, and to deal with any complaint or claim.
The details on the form. As well as your answers, the screening form records your full name, your date of birth, your email address and phone number, the name and phone number of your emergency contact, and your signature - both the name you type and, if you sign online, the signature you draw on screen. Your date of birth is held so that a health record can be matched to the right person with certainty.
Our legal basis. We process this information with your explicit consent (UK GDPR Articles 6(1)(a) and 9(2)(a)). Where we keep records because they may be needed for a legal claim, we rely on Article 9(2)(f).
Who can see it. Only the people who need it for those purposes: our staff; our insurer and professional advisers if there is a claim; medical services if there is an incident; and regulators or courts where the law requires it. When you complete the form online, our email provider (see "Where your data is stored" below) delivers a short alert to the studio saying that you have completed it; that alert contains your first name only, and never any of your answers. We never sell your information or share it for marketing.
How it is stored. If you complete your screening form yourself, online, it is stored in our secure UK database (see "Where your data is stored" below). Your answers, your typed name and the signature you draw are encrypted together as a single record before they are written, and can only be opened by studio staff signed in to our admin system. Anything completed on paper at the studio, and any screening record a member of staff makes during a screening call, is kept securely at the studio with your client record. Your emergency contact's details are held with your forms and used only to reach that person in an emergency; please make sure they know you have named them.
How long we keep it, and what is kept where. We keep as little online as possible. If you complete your screening form online, your answers are held in our encrypted database for 30 days only. Within that time we open your form in our admin system, print it, and file the paper copy at the studio. Thirty days after you sign it, everything you entered - your answers, your signature, and the IP address and browser you signed from - is permanently and automatically deleted by a job that runs every night. We keep only the date and time it was completed, which version of the form you used, and a single yes/no marker showing whether any of your answers means staff should check your paper file before a session. That marker is kept for as long as your client record, because staff rely on it to run your sessions safely. It records only that something needs checking - never which question, and never what you answered.
From then on the printed copy is the record, and your health information is no longer stored online at all. We keep that printed record for 6 years after your last session - or, if you never attend a session, 6 years after the date on the form - because that is how long a claim or complaint can be brought. Then it is securely destroyed.
Your rights. You can ask to see or correct your forms at any time. You can ask us to delete it, and we will, unless it is needed for a legal claim. You can withdraw your consent for future sessions at any time - this does not affect anything done before you withdrew it, and it means we can no longer run sessions for you until you consent again.
Complaints and contact. Questions or requests: tommy@greenoxygenhbot.com or 07378 271411. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk.
We rely on the following lawful bases under UK GDPR Article 6:
Your account and booking data is stored on servers located in the United Kingdom, operated by Supabase Inc. on Amazon Web Services (AWS) infrastructure in the London region.
Some of our providers process a limited amount of your data outside the UK:
Where data is transferred outside the UK, it is protected by appropriate safeguards recognised under UK GDPR - such as the UK International Data Transfer Agreement or equivalent contractual protections - and only the minimum each provider needs is ever shared. We do not transfer your data anywhere else.
You have the right to:
To exercise any of these rights, email us at tommy@greenoxygenhbot.com. We will respond within 30 days.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have mishandled your data.
We do not use cookies at all. There are no marketing or advertising cookies, no tracking pixels, and no analytics scripts of any kind on this site. The only third party that can ever load in your browser is the map on our Visit page, and only if you tap it - see "Sharing your data" below. What the site does use is your browser's own storage, and only for things it needs to work: one item to keep you signed in, one to remember you have seen this notice, and - if you start building or looking at a protocol - a few more holding that protocol's name, your account reference, and any basket or part-finished build you have not checked out yet, so the site can offer you a one-tap continue where you left off. None of it is sent to anyone else, and you can clear all of it at any time from your browser settings.
The only usage data we keep is the simple, first-party anonymous visitor count described under "When you visit the site" above. Nothing is stored in your browser for that - it is worked out on our server.
We only contact you for two purposes:
We do not send marketing, promotional, or sales emails, other than the opt-in newsletter described above and a single one-off invitation to leave a review after you have been coming for a while. You will never receive more than one of those, and you can tell us not to send it.
If an email to you permanently bounces, or you mark one as spam. If an address does not exist, or you mark a message as spam, our email provider tells us and we add that address to a suppression list so we never send to it again. A one-off temporary failure, such as a full mailbox, does not suppress you. The list holds the email address, the reason it was suppressed, and a reference to the message that triggered it, and we keep it for as long as we use that provider - deleting it would only mean we started emailing an address that has already bounced or complained. Ask us and we will take an address off it.
We do not sell, rent, or trade your personal data to anyone. We only share it with the following third parties, and only to the extent strictly necessary:
If we make material changes to this policy, we will, where appropriate, notify registered users by email. Continued use of the service after changes are posted constitutes acceptance of the updated policy.
Questions about your data?
Email: tommy@greenoxygenhbot.com
Phone: 07378 271411
Post: Green Oxygen Hyperbarics Limited, Jubilee House, Third Avenue, Globe Park, Marlow, SL7 1EY