Privacy Policy

Privacy Policy

Effective date: 1 February 2026 Last updated: 1 February 2026

Euni Health Limited (“we”, “us”, “our”) is a company registered in Scotland with company number SC874520 and our registered office at Charlotte House, 18 Young Street, Edinburgh, EH2 4JB, United Kingdom.

We are committed to protecting your privacy and to being transparent about how we collect, use, store and share your personal information. This Privacy Policy explains our practices in relation to the personal data we process when you visit our website www.eunihealth.com (the “Website”), interact with us online, or otherwise provide us with your personal information.

This policy applies to personal data processed under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are (Data Controller)

Euni Health Limited is the data controller responsible for your personal data.

Contact details: Email: privacy@euniheatlh.com Postal address: Charlotte House, 18 Young Street, Edinburgh, EH2 4JB, United Kingdom.

If we have appointed a Data Protection Officer (DPO), their contact details are: [DPO name/email – only include if you actually have one; most small companies do not].

2. What personal data we collect

We may collect and process the following types of personal data:

• Identity data: name, username, title, date of birth

• Contact data: email address, postal address, telephone number

• Technical data: internet protocol (IP) address, browser type/version, time zone setting, browser plug-in types, operating system, platform, device identifiers

• Usage data: information about how you use our Website, products and services (pages viewed, time spent, referring/exit pages, clickstream)

• Marketing & communications data: your preferences for receiving marketing from us and your communication preferences

• Location data: general geographic location derived from your IP address (not precise GPS)

• Other data you voluntarily provide (e.g. through contact forms, newsletter sign-ups, account creation, job applications, or customer support enquiries)

We do not knowingly collect special category data (e.g. health, race, religion, biometric data) or data about children under 16 via the Website unless we have specific consent or another lawful basis and appropriate safeguards.

3. How we collect your personal data

We collect data:

• Directly from you (when you fill in forms, create an account, subscribe to newsletters, purchase goods/services, correspond with us, or give us feedback)

• Automatically via cookies, server logs and similar technologies (see our separate Cookie Policy [link if you have one])

• From third parties (e.g. analytics providers such as Google Analytics, advertising networks, social media platforms, or business partners – where permitted)

4. How and why we use your personal data (lawful bases)

We only process personal data where we have a lawful basis under UK GDPR Article 6. The main bases we rely on are:

Purpose Types of data typically used Lawful basis(es)

To provide and improve our Website/services Technical, Usage, Identity, Contact Legitimate interests / Contract (where applicable)

To manage our relationship with you (e.g. customer support, account management) Identity, Contact, Transaction Contract / Legal obligation / Legitimate interests

To send marketing communications (e.g. newsletters) Identity, Contact, Marketing Consent / Legitimate interests (soft opt-in for existing customers where relevant)

To comply with legal obligations (e.g. tax, accounting, fraud prevention) All relevant categories Legal obligation

To protect our rights, property or safety (and that of others) All relevant categories Legitimate interests

Analytics and website improvement Technical, Usage Legitimate interests

When we rely on legitimate interests, we carry out a balancing test to ensure our interests are not overridden by your rights and freedoms.

5. Sharing your personal data

We may share your personal data with:

• Service providers / processors (e.g. website hosting, email service providers, payment processors, IT support, analytics providers such as Google)

• Professional advisers (lawyers, accountants, insurers)

• Regulators and law enforcement (where required by law)

• Business transfers (in the event of sale/merger/reorganisation of the company)

We do not sell your personal data to third parties for their own marketing purposes.

6. International transfers

If we transfer personal data outside the UK, we ensure an appropriate safeguard is in place (e.g. UK International Data Transfer Agreement / Addendum, adequacy decision, or binding corporate rules). Most of our processors are based in the UK or EEA or use approved mechanisms.

7. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or damage (e.g. encryption, access controls, regular security reviews). However, no internet transmission or electronic storage is 100% secure.

8. Data retention

We keep personal data only for as long as necessary for the purposes set out in this policy, or to comply with legal obligations. Typical retention periods:

• Website analytics / logs → up to 26 months (Google Analytics default)

• Marketing lists → until you unsubscribe / object

• Customer / contract records → 6 years after contract ends (statute of limitations)

Afterwards, data is securely deleted or anonymised.

9. Your data protection rights (UK GDPR)

You have the following rights (subject to certain exceptions):

• Right to be informed

• Right of access (subject access request)

• Right to rectification

• Right to erasure (“right to be forgotten”)

• Right to restrict processing

• Right to data portability

• Right to object (including to direct marketing and profiling)

• Rights related to automated decision-making (including profiling)

To exercise any of these rights, contact us at privacy@euniheatlh.com We will respond within one month (extendable in complex cases).

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint Telephone: 0303 123 1113

10. Cookies and similar technologies

Our Website uses cookies and similar tracking technologies.

11. Changes to this Privacy Policy

We may update this policy from time to time. The updated version will be posted on the Website with a revised “last updated” date. We encourage you to review it periodically.

12. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact: Email: privacy@eunihealth.com Post: Charlotte House, 18 Young Street, Edinburgh, EH2 4JB, United Kingdom.

Thank you for trusting us with your personal information.