Corporate information

Privacy and Cookie Policy

Last updated 8 October 2026

1 Who we are

The Bodhi Group respects your privacy and is committed to protecting your personal information.

This policy explains how we collect, use, store and share personal information when you visit bodhigroup.co.uk, contact us or communicate with us about our business.

The organisation responsible for this information—the “data controller”—is:

Bodhi Group Limited, trading as The Bodhi Group and The Bodhi Clinic
Company registration number: 16232754
Registered office: 91-97 Saltergate, Chesterfield, England, S40 1LA
Email: hello@bodhigroup.co.uk

We handle personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and relevant amendments.

2 What this policy covers

This policy covers The Bodhi Group corporate website and general, partnership, media and careers enquiries. It also covers initial contact through the website’s clinic and professional referral enquiry forms. Please read section 5 before sending sensitive information.

Clinical assessment, treatment records and the Sophia platform require separate service-specific privacy information. The corporate website currently displays Sophia login pages with disabled connection buttons and does not collect Sophia login credentials.

Following a link from this website to another service does not mean that this policy covers that service.

3 Information we collect

Depending on how you interact with us, we may collect:

Contact information: your name, email address, telephone number, organisation and job title.

Enquiry information: messages, correspondence and information you choose to provide.

Business information: details relevant to a potential partnership, supplier relationship or other business enquiry.

Recruitment information: your CV, employment history and other information you submit when enquiring about a role.

Technical information: your IP address, browser and device information, access times and website security logs.

Website preferences and usage information: cookie choices and information collected through any website measurement tools described in our cookie information.

We collect information directly from you and through the operation of our website. If someone introduces you to us or contacts us on your behalf, we may receive relevant contact and enquiry information from them. Where required, we will tell you the source and how we intend to use it.

Providing information through a general enquiry is voluntary. However, we may be unable to respond or take the steps you request without sufficient contact details and relevant information.

4 How and why we use your information

We use personal information only where we have an appropriate lawful basis. The basis depends on the purpose and our relationship with you.

General enquiries

Purpose Responding to your questions and maintaining correspondence.

Lawful basis Legitimate interests in communicating with people who contact us and managing our business.

Contracts

Purpose Taking steps at your request before entering into a contract with you, or performing that contract.

Lawful basis Contract. This applies where you are personally a party to the contract; business contact details may instead be processed under legitimate interests.

Business relationships

Purpose Managing relationships with business contacts, suppliers and prospective partners.

Lawful basis Legitimate interests in developing and administering those relationships.

Recruitment

Purpose Considering applications and recruitment enquiries.

Lawful basis Steps at your request before entering into an employment contract; legitimate interests in managing recruitment; or compliance with a specific legal obligation, as applicable.

Website operation and security

Purpose Operating, maintaining and securing the website, diagnosing faults and preventing misuse.

Lawful basis Legitimate interests in providing a reliable and secure website and protecting our systems and visitors.

Legal responsibilities

Purpose Keeping records required by law and responding to lawful requests from public authorities.

Lawful basis Compliance with legal obligations. Handling legal claims may also be necessary for our legitimate interests in establishing, exercising or defending our rights.

Optional updates and website tools

Purpose Sending optional marketing updates or using optional website technologies, where offered.

Lawful basis Consent where required. Any reliance on another permitted basis will be explained when your information is collected. You can withdraw consent at any time.

Where we rely on legitimate interests, we consider whether the use is necessary and whether your interests, rights or freedoms override our interests.

5 Sensitive information

Please do not send medical records, detailed treatment histories or other sensitive information through the corporate website or its general, clinic or referral enquiry forms. For a health-related enquiry, provide only your contact details and ask us to contact you. Any clinical assessment or collection of health information requires an appropriate secure route and separate privacy information from the organisation responsible for your care.

Website enquiries are sent through our managed email service to hello@bodhigroup.co.uk, with your supplied email address used as the reply-to address. Our website service provider supports website delivery and technical operation. Google receives requests when the website loads its remotely hosted fonts. Information may additionally be shared, where necessary and lawful, with our email and IT providers, professional advisers and public authorities.

If your enquiry concerns another Bodhi service or organisation, we will explain any necessary onward referral and identify the responsible Bodhi Group organisation. Information is shared only where there is an appropriate lawful basis and only to the extent needed.

Providers acting on our instructions must protect personal information and use it only for the agreed services. Other recipients may have their own responsibilities as data controllers.

7 International transfers

Our website delivery, email and font services may involve processing technical information or enquiry information outside the United Kingdom. Where a transfer is restricted by UK data protection law, an applicable adequacy regulation or appropriate safeguards, such as approved contractual protections, are required.

You can contact hello@bodhigroup.co.uk for information about relevant safeguards and how to obtain a copy.

8 How long we keep information

We retain information only for as long as necessary for the purpose for which it was collected. The period depends on the nature of the information, our relationship with you, legal record-keeping requirements and the need to resolve complaints or legal claims.

Enquiries and correspondence We consider whether the enquiry has been resolved and whether a continuing relationship or follow-up requires the records.

Business and contract records We consider the duration of the relationship and any applicable accounting, statutory or legal-claim requirements.

Recruitment records We consider the recruitment process and any relevant claim period. Keeping details for future opportunities requires a separately explained basis and retention period.

Technical logs and cookie records We consider the security or operational purpose and the lifespan of the technology.

When information is no longer needed, it should be securely deleted or anonymised, subject to any lawful requirement to preserve it.

9 Keeping information secure

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse and disclosure. Access should be limited to people who need the information for their work. No website or email service can guarantee absolute security.

10 Your rights

Depending on the circumstances and the lawful basis, you may ask us to provide access to your personal information, correct inaccurate information, delete it, restrict its use or provide a portable copy. Some rights are subject to legal conditions or exemptions.

Your right to object

You can object to processing based on legitimate interests for reasons relating to your particular situation. You have an absolute right to object to the use of your information for direct marketing, including related profiling.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before that point.

Making a request

Email hello@bodhigroup.co.uk with your request. We may need proportionate information to verify your identity. Requests are normally free and answered within one month, subject to permitted extensions or other lawful adjustments. We will explain any applicable extension or charge.

11 Automated decisions

The corporate website does not currently use AI to assess visitors or make decisions about treatment, admissions, employment or eligibility. Its enquiry forms use automated checks for required fields, formatting and suspected spam. Suspected automated submissions may be filtered without being forwarded. If you believe an enquiry has not reached us, contact hello@bodhigroup.co.uk directly. The Sophia connection is not active on this website; any future Sophia functions will require their own privacy information.

12 Questions and complaints

Contact hello@bodhigroup.co.uk or write to Bodhi Group Limited, 91-97 Saltergate, Chesterfield, England, S40 1LA, with any privacy question or complaint.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. Visit https://ico.org.uk/make-a-complaint/ or call 0303 123 1113. You do not have to complain to us first.

This section explains cookies and similar technologies used by websites to store information on, or access information from, your device. The rules can also apply to local storage, pixels and similar tools, not just files called cookies.

Essential technologies

Technologies strictly necessary to provide a service you request may be used without consent. They can support functions such as security or remembering privacy choices. They must still be explained to you.

Optional technologies

Analytics, personalisation, advertising and embedded content may involve additional technologies. Where consent is required, these must remain inactive until you choose to allow them. Continuing to browse is not consent. If a statutory exception is used, its conditions, information requirements and any required opt-out must be met.

Your choices

You can use your browser settings to inspect, delete or block cookies and site data. Blocking technologies needed for a website function can affect that function. You can also accept or reject optional analytics using the cookie banner shown on your first visit, and change your choice at any time using the “Cookie settings” link in the website footer. Rejecting analytics is as easy as accepting it, and does not affect your use of the website.

The website does not include advertising pixels.

Your cookie choice (essential). When you make a choice in the cookie banner, the website stores it in your browser’s local storage under the name “bodhi-cookie-consent”, so that we can respect it on later visits. It stays until you change your choice or clear your browser data.

Google Analytics (optional, only with your consent). If you accept analytics, the website loads Google Analytics 4, provided by Google, to help us understand how visitors use the website, such as which pages are viewed. Google Analytics sets cookies named “_ga” and “_ga_<container-id>”, which by Google’s default settings last for up to two years. Google may process information such as your IP address, device and browser details and the pages you visit, and this may involve transfers outside the UK. Google’s privacy information is available at https://policies.google.com/privacy. If you do not accept, or later withdraw consent, Google Analytics is not loaded and no analytics data is sent. When you withdraw consent, we delete the Google Analytics cookies the website can access.

Website delivery and security services may also process technical information as described in sections 3, 6 and 7.

The website includes technical error reporting, which may report error details and the affected page address to the website service provider to help diagnose faults.

Links and embedded content

The website links to external social-media services, whose own privacy and cookie policies apply when you visit them. It also loads fonts from fonts.googleapis.com and fonts.gstatic.com, creating requests to Google’s servers. Those requests necessarily expose network information such as your IP address. Remote font delivery is distinct from an advertising cookie.

14 Changes to this policy

We may update this policy to reflect changes to our services, technologies or legal obligations. The date at the top shows when it was last updated. Where necessary, we will draw material changes to your attention and obtain fresh consent before a new use that requires it.

For questions about this policy, contact hello@bodhigroup.co.uk.