Privacy policy

Who I am

Chilly Dooker is run by Liz Melville. This policy explains what personal information I collect when you use this website, join my community, or book a session, experience or retreat with me. It also explains how I use that information, how I keep it safe, and what rights you have over it.

I'm the data controller for the information described here. I may update this policy from time to time, and the latest version will always be on this page.

What I collect

Depending on how you interact with Chilly Dooker, I may collect:

• Contact details: your name, email address and phone number when you sign up for free resources, join my mailing list, buy a product or make a booking.
• Booking and payment information: what you've booked and records of your payments. Card payments are handled securely by Stripe. I never see or store your full card details.
• Health information: before any breathwork, cold water or sauna session, I ask you to complete a health disclosure and waiver form. This covers any relevant medical conditions, such as heart, circulatory or respiratory conditions, high or low blood pressure, Raynaud's, migraines, asthma or pregnancy. I also ask for an emergency contact.
• Photos and video: I sometimes photograph or film sessions for marketing. This is explained on the waiver form, and you can opt out at any time.
• Community information: if you join The Chilly Circle on WhatsApp, other members of the group can see your name and phone number.
• Website data: if you accept cookies, information about how you use this site, such as the pages you view, the forms you submit and the purchases or bookings you make, along with technical details like your browser, device and IP address. If you submit a form or make a purchase, this can include scrambled (hashed) versions of your contact details, such as your email address or phone number. More on this in the Cookies section below.

Why I collect it

I only use your information where the law allows me to. Here's what I use it for, and the legal basis for each.

Delivering what you've booked or bought, including confirming bookings, sending joining instructions and taking payment

Contract

Checking an activity is suitable for you, and acting appropriately in an emergency

Explicit consent

Sending my newsletter and occasional offers, if you've signed up

Consent

Using photos or video of sessions in my marketing

Consent

Understanding how the website is used, measuring how my adverts perform, and showing my adverts on Facebook and Instagram to people who have visited the site or may be interested in it (analytics and Meta Pixel cookies)

Consent

Keeping proper business, insurance and tax records

Legal obligation and legitimate interests

Health information is a special category of personal data under UK data protection law. I only collect it with your explicit consent, which you give on the waiver form, and I only use it to keep you safe.

Every marketing email includes an unsubscribe link, so you can stop hearing from me whenever you like.

Who I share it with

I will never sell or rent your personal information. I use a small number of trusted services to run the business, and they process data on my behalf:

• GoHighLevel: this website, sign-up and booking forms, online courses, and secure storage of waiver forms
• Kit: my email newsletter
• Make.com: connecting my sign-up forms to my email system
• Stripe: card payments
• Google Workspace: storage of photos and video from sessions
• Google Fonts: this website loads its fonts from Google, which means your IP address is sent to Google when a page loads
• WhatsApp (Meta): The Chilly Circle community

If you accept advertising cookies, data collected by the Meta Pixel is sent to Meta Platforms Ireland Limited (Facebook and Instagram). Meta may use it for its own purposes, in line with Meta's Privacy Policy.

Some of these providers store data outside the UK, including in the United States. Where they do, they use safeguards recognised under UK data protection law.

If you need medical help during a session, I may share your health information with emergency services. I may also share information with my insurer if a claim or incident requires it.

How long I keep it

• Health disclosure and waiver forms: five years after your last session.
• Booking and payment records: six years, for tax and accounting purposes.
• Mailing list details: until you unsubscribe.
• Photos and video: for as long as they're in use in my marketing, or until you ask me to stop using them.
• Cookies: each cookie expires after a set period. You can delete them in your browser at any time.

When information is no longer needed, I delete it securely.

Keeping your information secure

Waiver forms are stored in GoHighLevel and photos in Google Workspace. Both are password-protected, and only I have access. I only keep the information I need.

Cookies

Cookies are small files placed on your device when you visit a website. This website is built and hosted on GoHighLevel, and it uses three kinds:

• Essential cookies: needed for the site to work, including remembering your cookie choice. These don't need your consent.
• Analytics cookies: GoHighLevel's built-in analytics show me which pages are being visited. I use this to improve the site.
• Advertising cookies (Meta Pixel): the Meta Pixel is a tracking tool from Meta Platforms Ireland Limited. It records the pages you view, and when you take certain actions: submitting a sign-up or enquiry form (a "lead"), or buying or booking something (a "purchase", which includes what you bought and how much it cost, but never your card details). It also records your browser, device and IP address. I use "Advanced Matching", which means that when you submit a form or make a purchase, the pixel also sends Meta scrambled (hashed) versions of the contact details you entered, such as your email address or phone number, so Meta can match the action to your Facebook or Instagram account. I use all of this to measure how my adverts perform, and to show my adverts on Facebook and Instagram to people who have visited this site or may be interested in it. I don't use the pixel on my health disclosure and waiver form.

Analytics and advertising cookies only run if you click "Accept" on the cookie banner. If you decline, they stay off and the site works as normal.

Changing your mind: you can withdraw your consent at any time by deleting cookies and site data in your browser settings, after which you'll be asked again on your next visit. You can also control the adverts you see in your Facebook and Instagram ad settings. Some parts of the site may not work as well if you block all cookies.

Links to other websites

This site links to other sites, such as Instagram, Facebook, Substack and WhatsApp. Once you leave this site, their own privacy policies apply rather than this one.

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the information I hold about you, free of charge in most cases
• ask me to correct anything inaccurate
• ask me to delete your information
• withdraw your consent at any time, including for cookies, marketing emails, photos or your health information (without health information, I won't be able to run sessions with you safely)
• object to or restrict how I use your information
• ask for your information in a format you can take elsewhere

To make any of these requests, email [email protected]. I'll respond within one month.

Contact and complaints

If you have any questions about this policy or how I handle your information, get in touch:

If you're unhappy with how I've handled your information, please contact me first so I can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.