Last updated: 3 September 2026
Depth Recovery Ltd (“Depth Recovery”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This privacy policy explains what information we collect, why we use it, who we may share it with and the rights you have under UK data protection law.
Who we are
Depth Recovery Ltd is a company registered in England and Wales (Company No. 16978286).
We are the data controller for the personal information described in this policy.
Email: hello@depthrecovery.co.uk
Information we may collect
Depending on how you interact with Depth Recovery, we may collect:
- your name, email address, telephone number and contact details;
- appointment and booking information;
- information about services and packages you purchase or use;
- payment and transaction information;
- communications you send to us;
- information you provide through our website or contact forms;
- health, wellbeing and suitability information that you provide as part of our screening, consultation or consent processes; and
- technical information relating to your use of our website, where applicable.
Some information you provide during suitability screening may constitute special-category health data under UK data protection law. We only collect health information that we consider necessary to assess suitability and deliver our services safely and appropriately.
How we use your information
We may use your personal information to:
- respond to enquiries;
- arrange and manage appointments;
- provide the services, programmes and packages you request;
- conduct suitability screening and maintain appropriate client records;
- process payments and maintain financial records;
- communicate with you about your appointments or services;
- manage cancellations, packages and session credits;
- meet our legal, regulatory, accounting and insurance obligations;
- operate, secure and improve our website and business; and
- send marketing communications where you have chosen to receive them or where otherwise permitted by law.
Our lawful bases
Under UK data protection law, we must have a lawful basis for using your personal information.
Depending on the circumstances, we may process your information because it is necessary to perform a contract with you or take steps at your request before entering into a contract, because we have a legal obligation, because we have a legitimate business interest which does not override your rights, or because you have given consent.
Where we collect health information or other special-category data as part of our suitability and screening process, we will identify and document an appropriate additional condition under Article 9 of the UK GDPR before processing that information.
Where we rely on your explicit consent to process special-category health information, we will ask you to provide that consent separately and clearly. You may withdraw consent at any time, although this will not affect processing that took place before consent was withdrawn.
Who we share information with
We may share personal information where necessary with trusted organisations that help us operate Depth Recovery, including providers of:
- booking and customer-management systems;
- payment processing;
- website hosting and technology;
- email and communications;
- accounting and professional services; and
- insurance, legal or regulatory services where necessary.
We currently use Square for aspects of our booking, customer-management and payment processes. Information entered through Square may therefore be processed by Square in accordance with the applicable arrangements between Square and Depth Recovery and Square’s own privacy practices.
We do not sell your personal information.
International transfers
Some of the technology providers we use may process information outside the United Kingdom. Where this happens, we take reasonable steps to ensure that appropriate safeguards required by UK data protection law are in place.
How long we keep your information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, insurance and record-keeping requirements.
Different types of information may be kept for different periods. We periodically review the information we hold and securely delete or anonymise information that is no longer required.
How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
We also aim to collect only the information reasonably necessary to provide our services and operate our business.
Marketing
We will only send electronic marketing communications where we have an appropriate lawful basis to do so. Where consent is required, we will ask for it.
You can unsubscribe from marketing communications at any time using the unsubscribe option provided or by contacting us.
Your data protection rights
Depending on the circumstances, UK data protection law gives you rights relating to your personal information, including rights to:
- ask for a copy of the personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your information in certain circumstances;
- ask us to restrict how we use your information;
- object to certain uses of your information;
- receive certain information in a portable format; and
- withdraw consent where we rely upon consent.
To exercise your rights, contact us at hello@depthrecovery.co.uk.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
Changes to this policy
We may update this privacy policy as our services, systems or legal obligations change. The latest version will always be available on this website.