Privacy Policy

PRIVACY POLICY

EXETER BREASTFEEDING SERVICE

Last Updated: 11th October 2026

1. INTRODUCTION

Exeter Breastfeeding Service is committed to respecting and protecting the privacy, confidentiality and personal information of everyone who visits our website, contacts us, makes an booking, or uses our breastfeeding support and consultation services.

We recognise that individuals accessing our services may share personal, private and sensitive information relating to pregnancy, childbirth, breastfeeding, infant feeding, physical health and emotional wellbeing. We understand the importance of treating this information with care, dignity, discretion and confidentiality.

This Privacy Policy explains how we collect, use, process, store, protect and, where appropriate, share personal information in connection with our website and services.

Our approach to data protection is guided by the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK privacy and electronic communications legislation.

By using our website or contacting our service, you acknowledge that you have been provided with this Privacy Policy. Where consent is required by law, we will seek that consent separately.

2. WHO WE ARE

Exeter Breastfeeding Service provides breastfeeding education, preparation and support to expectant parents, mothers and families in Exeter and the surrounding areas of Devon.

Our services include breastfeeding preparation classes, breastfeeding support drop-in sessions, telephone consultations, home visits and appropriate help, support and signposting.

Our services are led by Pippa, a registered midwife, and aim to provide individualised information, practical guidance and compassionate support throughout the breastfeeding journey.

For the purposes of UK data protection legislation, the person or organisation responsible for deciding how and why personal information is processed is known as the Data Controller.

Data Controller: Exeter Breastfeeding Service

Contact Email: exeterbreastfeedingservice@gmail.com

Telephone: 07825 140827

Website: www.exeterbreastfeeding.com

You can contact us using the details above if you have a question about how we handle your personal information or wish to exercise your data protection rights.

3. INFORMATION WE MAY COLLECT

Depending on how you interact with Exeter Breastfeeding Service, we may collect and process different categories of personal information.

3.1 Personal Identification Information

This may include your full name, contact details, telephone number, email address, correspondence address, appointment information and other details you choose to provide.

3.2 Booking and Transaction Information

When you book or purchase services through our website, we may collect booking details, selected services, appointment dates, payment status, transaction references, cancellation requests and related correspondence.

Payment card information may be handled by payment processing providers rather than being directly accessible to Exeter Breastfeeding Service.

3.3 Pregnancy, Breastfeeding and Health Information

Because we provide breastfeeding-related support, you may choose to share sensitive information relating to pregnancy, birth experiences, infant feeding, breastfeeding difficulties, medical history, relevant health conditions, prescribed medication, emotional wellbeing or other matters connected with the support requested.

Depending on the service provided, information may also relate to your baby, including feeding patterns, feeding difficulties, age, relevant medical history and any concerns you wish to discuss.

We aim to collect only information that is reasonably necessary for providing appropriate support and guidance.

3.4 Communication Information

We may retain information contained in emails, telephone enquiries, appointment discussions, website forms and other communications where necessary to manage enquiries, provide services, maintain appropriate records or respond to concerns.

3.5 Website Usage Information

When you visit our website, certain technical information may be processed, including your IP address, browser type, device information, website pages visited, referral source and information relating to website functionality.

Some of this information may be collected through cookies or similar technologies, subject to applicable consent requirements.

4. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information when you contact us directly, submit an enquiry, complete a website form, make an appointment, book a class, purchase a gift card, attend a consultation or communicate with us about our services.

Information may also be provided during telephone consultations, home visits, breastfeeding support appointments or other direct interactions.

In limited circumstances, information may be provided by another person or healthcare professional where this is appropriate and lawful.

Our website may also automatically process technical information through its hosting platform and associated website services.

We will not deliberately request information that is unrelated to the purpose for which it is needed.

5. HOW WE USE YOUR PERSONAL INFORMATION

Personal information may be processed for the following purposes:

Responding to enquiries and providing requested information.
Arranging, confirming, changing or cancelling appointments.
Administering classes, consultations and other booked services.
Providing appropriate breastfeeding education and individualised support.
Maintaining records relevant to the services provided.
Processing payments, refunds and related transactions.
Sending necessary booking confirmations and service communications.
Responding to complaints, concerns or requests.
Meeting legal, regulatory, professional and financial obligations.
Maintaining the functionality, security and administration of our website.
Improving the accessibility and effectiveness of our services.
Sending optional marketing communications where the necessary permission or other lawful basis exists.

We will not use personal information for unrelated purposes without an appropriate lawful basis.

6. OUR LAWFUL BASIS FOR PROCESSING INFORMATION

Under UK GDPR, organisations must have a valid lawful basis for collecting and processing personal information.

The lawful basis applicable to your information will depend on the circumstances and the purpose for which it is being processed.

6.1 Contractual Necessity

We may process personal information where it is necessary to arrange, provide or administer services you have requested, including appointments, consultations, bookings and related transactions.

6.2 Legal Obligations

Certain information may need to be retained or processed to comply with applicable legal obligations, including financial record-keeping, tax requirements and other relevant duties.

6.3 Legitimate Interests

Where appropriate, we may process personal information for legitimate business purposes, including responding to enquiries, maintaining website security, managing customer relationships and improving our services.

We will consider your rights and interests before relying on this lawful basis.

6.4 Consent

Where consent is required, including for certain marketing activities, non-essential cookies or particular uses of information, we will seek appropriate permission.

You may withdraw consent at any time. Withdrawal will not affect the lawfulness of processing carried out before that withdrawal.

6.5 Protection of Vital Interests

In exceptional circumstances involving a serious and immediate risk to life or safety, information may need to be processed or disclosed where permitted by applicable law.

7. SENSITIVE HEALTH INFORMATION AND CONFIDENTIALITY

Information relating to physical or mental health is classified as special category personal data under UK GDPR and receives additional legal protection.

Because Exeter Breastfeeding Service provides breastfeeding-related guidance and consultations, some information shared with us may fall into this category.

We recognise the particularly personal nature of discussions about pregnancy, infant feeding, maternal health and emotional wellbeing.

We will handle this information confidentially, limit access to individuals with an appropriate need to know and use it only for lawful and specified purposes.

Processing special category health information requires both an appropriate lawful basis under Article 6 UK GDPR and a separate condition under Article 9.

Depending on the nature of the service and the circumstances, the relevant Article 9 condition may include explicit consent or processing necessary for the provision of health or social care, where the legal requirements for that condition are met.

The applicable condition will be determined and documented in accordance with the law, including any relevant confidentiality and professional obligations.

We will not routinely disclose identifiable health information to unrelated third parties for advertising or commercial profiling.

8. INFORMATION RELATING TO BABIES AND CHILDREN

Some breastfeeding consultations may involve information relating to babies or young children.

This information may include feeding history, developmental or health concerns relevant to feeding, and details supplied by a parent or person with parental responsibility.

We recognise that information relating to children requires particular care.

We will aim to collect only the information necessary for delivering the requested service, keep relevant records appropriately protected and avoid unnecessary disclosure.

Where parental responsibility, consent or another lawful basis is relevant, we will consider the applicable legal requirements.

9. BOOKINGS AND APPOINTMENTS

Our website offers facilities for booking or purchasing certain services.

When you submit booking information, relevant personal details may be processed through our website platform and its associated booking services.

This information may be used to confirm appointments, provide joining instructions, send relevant reminders, manage cancellations and maintain necessary booking records.

Information supplied during a booking should be accurate and relevant to the service requested.

Where additional personal or health information is required for a consultation, we will explain the purpose for which it is collected.

10. PAYMENTS AND FINANCIAL INFORMATION

Payments made through our website may be processed using third-party payment processing facilities.

We may receive information concerning payment status, transaction dates, booking references, payment amounts and refunds.

Payment providers may independently process information necessary to authorise transactions, prevent fraud and comply with applicable financial regulations.

Exeter Breastfeeding Service does not require customers to provide payment card details through ordinary email correspondence.

We recommend that customers only submit payment details through the designated secure payment facilities.

Financial records will be retained as necessary to meet applicable accounting, tax and legal obligations.

11. WEBSITE HOSTING AND THIRD-PARTY SERVICES

Our website is hosted using Wix.

Wix provides website hosting and may supply associated services such as website forms, appointment bookings, website analytics and payment integrations.

Personal information submitted through the website may be processed by Wix and relevant service providers as part of delivering these functions.

Some providers act as data processors on our behalf, while others may act as independent data controllers for particular activities.

We expect third parties processing information on our behalf to handle that information in accordance with applicable legal requirements and contractual arrangements.

Further information about Wix's privacy practices can be found at www.wix.com/about/privacy.

12. COOKIES AND WEBSITE TRACKING

Our website may use cookies and similar technologies to support website functionality, security, visitor preferences, performance and analytics.

Cookies are small files or identifiers that may be placed on your device when you access a website.

Some cookies are necessary for essential website functions, while others may support optional analytics, personalisation or other features.

Where legally required, non-essential cookies and similar tracking technologies will not be used unless appropriate consent has been obtained.

Visitors should be provided with a meaningful choice about optional cookies and the ability to change their preferences.

Additional information about the cookies and tracking technologies used on this website should be provided in our separate Cookie Policy.

13. MARKETING COMMUNICATIONS

We may occasionally wish to inform customers or interested visitors about relevant classes, new services, availability or other updates.

Where required, we will obtain appropriate consent before sending electronic marketing communications.

Marketing preferences will be respected, and individuals will be given an appropriate opportunity to unsubscribe or object to marketing.

We will not treat a booking or healthcare-related enquiry as automatic permission to receive unrelated marketing communications.

Personal health information will not be used to target individuals with marketing unless there is a valid and appropriate lawful basis and the applicable special category data requirements have been satisfied.

14. CUSTOMER REVIEWS AND TESTIMONIALS

We may invite customers to provide feedback about their experience with Exeter Breastfeeding Service.

Reviews and testimonials may be displayed on our website or other promotional materials where an appropriate lawful basis exists.

Where a testimonial identifies an individual or contains sensitive information, we will obtain any consent required before publication.

We will take particular care where feedback refers to a baby, medical circumstances, feeding difficulties or other private family information.

Customers may contact us to raise concerns about the continued publication of identifiable testimonials, and we will consider such requests in accordance with applicable law.

15. SHARING YOUR INFORMATION

We do not sell personal information to third parties.

We may disclose limited personal information where reasonably necessary and legally permitted, including to:

Website hosting and technical service providers.
Booking and appointment administration providers.
Payment processing providers.
Professional advisers where appropriate.
Authorities where disclosure is required by law.
Healthcare professionals or other relevant services where a lawful basis and any additional confidentiality requirements permit disclosure.

Information will not be shared more widely than is necessary for the identified purpose.

Where disclosure involves sensitive health information, additional legal requirements and safeguards will apply.

16. INTERNATIONAL DATA TRANSFERS

Some website hosting, communication, payment or other service providers may process information outside the United Kingdom.

Where international transfers of personal information occur, we will ensure that an appropriate transfer mechanism or other lawful exception applies.

This may include transfers to countries recognised as providing adequate protection or the use of approved contractual safeguards.

You may contact us if you require further information about relevant international transfer arrangements.

17. HOW LONG WE KEEP PERSONAL INFORMATION

We will not retain personal information for longer than is necessary for the purposes for which it was collected, subject to applicable legal, regulatory and professional obligations.

Different categories of information may require different retention periods.

For example, basic enquiries may be deleted when no longer required, financial records may need to be retained for statutory purposes, and records associated with health-related consultations may be subject to separate professional record-keeping requirements.

We will determine and document appropriate retention periods having regard to the nature of the information, the purpose of processing, legal obligations and any relevant professional guidance.

When information is no longer required, it will be securely deleted, anonymised or otherwise appropriately disposed of.

18. HOW WE PROTECT YOUR PERSONAL INFORMATION

We recognise our responsibility to protect personal information against unauthorised access, loss, disclosure, alteration or misuse.

Appropriate security measures will be applied according to the nature and sensitivity of the information processed.

These may include appropriate access restrictions, account security controls, secure service providers, staff or practitioner confidentiality obligations and suitable procedures for maintaining and disposing of records.

Where personal information is processed by third-party service providers, we will consider the security measures and contractual protections relevant to those arrangements.

Although reasonable measures can reduce risks, no internet-based service or electronic communication system can guarantee absolute security.

19. PERSONAL DATA BREACHES

A personal data breach may involve the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal information.

Where a breach occurs, we will assess its nature, potential impact and the action required to protect affected individuals.

Where legally required, we will report a personal data breach to the Information Commissioner's Office within the applicable statutory timeframe.

Affected individuals will also be informed where notification is required by law.

We will take appropriate steps to investigate and address identified risks.

20. YOUR DATA PROTECTION RIGHTS

Under UK data protection legislation, you may have the following rights, subject to applicable conditions and exemptions.

Right to Be Informed

You have the right to receive clear information about how your personal information is collected and used.

Right of Access

You may request access to personal information held about you.

Right to Rectification

You may request correction of inaccurate personal information or completion of incomplete information.

Right to Erasure

In certain circumstances, you may request deletion of personal information.

Right to Restrict Processing

You may request that processing of your personal information is restricted in qualifying circumstances.

Right to Data Portability

Where applicable, you may request certain information in a structured, commonly used and machine-readable format.

Right to Object

You may object to processing undertaken on particular lawful grounds, including certain processing based on legitimate interests.

Rights Relating to Automated Decision-Making

You may have rights relating to decisions made solely through automated processing where those decisions produce legal or similarly significant effects.

These rights are not absolute and may be subject to lawful limitations.

21. HOW TO EXERCISE YOUR RIGHTS

If you wish to request access to your information, ask for a correction, raise a concern or exercise another data protection right, please contact:

Exeter Breastfeeding Service

Email: exeterbreastfeedingservice@gmail.com

Telephone: 07825 140827

We may need to verify your identity before releasing personal information or completing certain requests.

We will respond within the timeframe required by applicable data protection legislation.

Where additional time is legally permitted because of the complexity or number of requests, we will inform you as required.

We will not normally charge a fee for exercising your rights, although the law permits charges or refusal in certain circumstances.

22. THIRD-PARTY WEBSITES AND LINKS

Our website may contain links to external websites, social media services, payment providers or other third-party resources.

These websites may operate their own privacy policies and data protection practices.

Exeter Breastfeeding Service is not responsible for the privacy practices of unrelated third-party websites.

We encourage visitors to review the relevant privacy information before submitting personal details to external organisations.

23. EMAIL AND ELECTRONIC COMMUNICATIONS

We may communicate with individuals by email or telephone in connection with enquiries, bookings and services.

Electronic communications may contain personal information relevant to the matter being discussed.

We encourage customers to avoid including unnecessary sensitive personal or medical information in ordinary website enquiries or unsecured communications.

Where a more appropriate method of communication is required for sensitive matters, we will seek to make suitable arrangements.

We may retain relevant communications where necessary for managing the service or maintaining appropriate records.

24. CONFIDENTIALITY AND PROFESSIONAL RESPONSIBILITIES

We understand that breastfeeding, pregnancy and postnatal experiences may involve deeply personal concerns.

Information shared during consultations will be treated with appropriate professional confidentiality, subject to applicable law, safeguarding duties and any circumstances in which disclosure is legally justified or required.

Where disclosure is being considered, we will take account of confidentiality requirements, the person's rights, relevant professional obligations and the nature of any risk involved.

The fact that an individual has contacted or received support from Exeter Breastfeeding Service will itself be treated as personal information.

25. COMPLAINTS AND CONCERNS

If you are concerned about how your personal information has been handled, we encourage you to contact Exeter Breastfeeding Service in the first instance.

We will consider complaints relating to privacy, confidentiality and personal information appropriately.

You also have the right to raise a complaint with the Information Commissioner's Office, the UK's independent data protection regulator.

Information Commissioner's Office

Website: www.ico.org.uk

Telephone: 0303 123 1113

You do not have to contact us before approaching the Information Commissioner's Office.

26. CHANGES TO THIS PRIVACY POLICY

We may amend this Privacy Policy from time to time to reflect changes in our services, website functionality, data processing practices, legal requirements or regulatory guidance.

Where changes are made, the updated policy will be published on our website.

The date at the beginning of this policy will identify the latest version.

Where significant changes require additional notification or consent, we will take the appropriate steps.

27. CONTACT INFORMATION

If you have any questions about this Privacy Policy, the handling of your personal information or your rights under data protection legislation, please contact us.

Exeter Breastfeeding Service

Website: www.exeterbreastfeeding.com

Email: exeterbreastfeedingservice@gmail.com

Telephone: 07825 140827

We are committed to treating your information respectfully, protecting your confidentiality and handling personal information in accordance with applicable UK data protection legislation.

Last Updated: 11 October 2026