Privacy Policy

Last updated: 15th January 2026

Data Controller

DirectPathPro Ltd ("we", "us", or "our") is the data controller responsible for your personal data. We are registered in England and Wales under company number 95135782, with our registered office at 266 Church Street, Liverpool L3L 8RJ, Merseyside, United Kingdom.

Data We Collect

We collect and process various types of personal data when you interact with our services. The data we collect includes information you provide directly to us through our contact forms, consultation requests, and email communications. This may include your name, email address, phone number, business name, and details about your spa booking system requirements. We also collect technical information automatically when you visit our website, including your IP address, browser type, device information, and pages visited.

How We Use Your Information

We use your personal data for specific purposes based on legitimate business interests and legal obligations. We use of your data includes providing our spa booking system comparison and consultation services, responding to your enquiries and service requests, sending you relevant information about our services, and improving our website and service offerings. We may also use your information to comply with legal requirements and protect our business interests.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Consent: Where you have given clear consent for us to process your data for specific purposes
  • Contract: Where processing is necessary for the performance of our services
  • Legitimate Interests: Where we have legitimate business interests that are not overridden by your privacy rights
  • Legal Obligation: Where we need to comply with legal requirements

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing

We do not sell, trade, or rent your personal data to third parties. We may share your information with trusted service providers who assist us in operating our website and conducting our business, provided they agree to keep your information confidential. We may also disclose your information when required by law or to protect our rights and safety.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. For consultation enquiries and service provision, we typically retain data for up to 7 years after the completion of services or last contact. Marketing communications data is retained until you unsubscribe or withdraw consent. We may retain certain information for longer periods where required by law or for legitimate business purposes.

Your Rights

Under GDPR and UK data protection laws, you have several rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you
  • Right to Rectification: You can ask us to correct any inaccurate or incomplete data
  • Right to Erasure: You can request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: You can ask us to limit how we use your data
  • Right to Data Portability: You can request your data in a portable format
  • Right to Object: You can object to processing based on legitimate interests or for marketing purposes
  • Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. When we transfer data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved mechanisms to protect your data.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this privacy policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters, if you believe we have not handled your personal data in accordance with applicable laws. You can contact the ICO through their website at ico.org.uk or by phone at 0303 123 1113.