Privacy Policy

Who we are

Go High Level Consultancy is a trading name of Health Hub Academy Ltd, a company registered in England and Wales (company number 12486061). Registered office: 15 Neptune Court, Vanguard Way, Cardiff CF24 5PJ. Telephone: 01443 800586.

In this notice, "we", "us" and "our" mean Go High Level Consultancy. We are the controller of the personal data described here, which means we decide how and why it is used.

This notice is mainly for our clients, potential clients, people who contact us or use this website, and related third parties whose data we process while providing our services.

The law we follow

We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025) and the Privacy and Electronic Communications Regulations 2003 (PECR).

Definitions

Personal data means any information, electronic or in organised paper records, that identifies you or relates to you when you can be identified.

Special category data means more sensitive information: health records; information about your sex life or sexual orientation; political opinions; religious or philosophical beliefs; racial or ethnic origin; trade union membership; and genetic and biometric data. We do not ask for special category data. If you include it in a message to us, we will only use it to deal with that message.

Our lawful bases for using your data

• Contract: to provide the services you have agreed to buy from us, or to take steps you ask for before entering a contract (for example, preparing a quote).
• Legitimate interests: to run our business in ways you would reasonably expect, for example replying to enquiries, keeping business records and improving our services, where this does not override your rights.
• Legal obligation: to keep accounting and tax records and to meet other legal duties.
• Consent: for example, when you tick a box to receive our email newsletter. You can withdraw consent at any time.

When we collect your data

We normally collect personal data when you give it to us: by email, through an online form or booking calendar, over the phone, face to face or by post. You might give us information when you contact us through our website, book a call, sign up to a newsletter, interact with us on social media or use our services.

What we collect

• Name and contact details, including address, email address and phone numbers.
• Your business name and role.
• Date of birth.
• Information you include in your communications with us.
• Payment and financial information connected with our contract with you, including bank details for Direct Debit.

How we use your data

• To deliver our services and manage our relationship with you.
• To give you advice or information about our services.
• To take and manage payments.
• To respond to complaints and try to resolve them.
• To train our staff and check the quality of our service.
• To tell you about our other services, but only where you have agreed to this. Every marketing email has an unsubscribe link.

When we act as your data processor

When we build or manage a HighLevel account for you, we may handle personal data about your own contacts and customers. For that data, you are the controller and we act as your processor. We only process it on your written instructions, under a data processing agreement that meets Article 28 of the UK GDPR.

Who we share your data with

We only share personal data where it is needed to provide our services, to run our business or where the law requires it. The organisations we use include:

• HighLevel, Inc. (CRM, booking calendars and messaging).
• GoCardless (Direct Debit payments) and Stripe (card payments).
• Cloudflare (hosting and security for this website).
• Our bank, accountants and professional advisers.
• HMRC, regulators or law enforcement where we are legally required to share information.

Our suppliers may only use your data for the purposes we specify, must keep it secure, and must delete or return it when our contract with them ends.

International transfers

Some of our suppliers, including HighLevel, are based in the United States or store data there. When personal data leaves the UK, we make sure it is protected by one of the safeguards allowed under UK GDPR. These include UK adequacy regulations (such as the UK Extension to the EU-US Data Privacy Framework, where the recipient is certified) or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

How long we keep your data

• Enquiries that don't lead to work: up to 24 months from our last contact.
• Client records, contracts and invoices: six years after the end of the financial year in which our contract ends, to meet tax and accounting rules.
• Marketing lists: until you unsubscribe or ask us to remove you.
• Data in your HighLevel account: as set out in our data processing agreement with you.

Keeping your data secure

We use appropriate technical and organisational measures to protect personal data, including limiting access to the people who need it to do their job.

Cookies

This website does not use analytics or advertising cookies. Our Cookie Policy explains the cookies that may be set and how to control them.

Your rights

Under UK GDPR you have the right:

• to be informed about how we use your data, which is what this notice is for;
• of access to a copy of your personal data (a subject access request);
• to rectification of inaccurate or incomplete data;
• to erasure in certain circumstances. This is not an absolute right, and we may need to keep some data, for example to meet legal record-keeping duties;
• to restrict processing in certain circumstances;
• to data portability, to receive data you gave us in a structured, machine-readable format or have it sent to another organisation;
• to object to processing based on legitimate interests, and to object to direct marketing at any time;
• to withdraw consent where we rely on it; and
• not to be subject to decisions based solely on automated processing that have legal or similarly significant effects. We do not make decisions like this.

We will respond to requests within one month. If a request is complex we may extend this by up to two further months, and we will tell you why. For more on your rights, see the Information Commissioner's Office website.

Contact us about your data

Our Data Protection Manager is Sue Worrall. To ask a question or use any of your rights, call 01443 800586 or write to Data Protection Manager, Health Hub Academy Ltd, 15 Neptune Court, Vanguard Way, Cardiff CF24 5PJ. If you think information we hold about you is wrong or out of date, please tell us and we will correct it.

Complaints

If you are unhappy with how we have handled your personal data, please complain to our Data Protection Manager first, using the details above. We will acknowledge your complaint within 30 days and investigate it without undue delay.

If you are still not satisfied, you can complain to the Information Commissioner's Office (ICO) on 0303 123 1113 or at ico.org.uk/make-a-complaint.

Links to other websites

Our contact form and booking calendars are provided by HighLevel, and the details you enter go into our HighLevel account. Our website also links to other sites. We are not responsible for how other websites handle your data, so please read their privacy notices.

Changes to this notice

We may update this notice from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes that affect current clients, we will tell you directly.