Breathe First

Privacy Policy

How we collect, use, and protect your personal data.

GDPR Compliant
Your Data Protected
Full Transparency

What We Collect

Contact details, order history, browsing activity & health info you share with us

Why We Use It

Fulfil orders, improve your experience, personalise recommendations & measure marketing

Your Rights

Access, correct, delete, or export your data at any time

Who We Are

Breathe First Ltd ("we", "us", "our") provides functional health products and educational therapy services, including Buteyko-based breathing re-education, oral posture, and jaw comfort tools. We operate the website breathefirst.co.uk.

Data Controller

Breathe First Ltd
Company No. 16761307
Altrincham, United Kingdom

Contact

[email protected]
Include "Privacy" in the subject line for data requests.

Information We Collect

Information You Provide
  • Contact & identity data: name, email, phone, billing and delivery address when you place an order or submit an enquiry.
  • Payment data: processed securely by our payment providers (Stripe, PayPal). We never see or store your full card details.
  • Health information: details you share during consultations, used solely to provide appropriate therapy and product recommendations.
  • Communications: emails and messages you send us.
Information Collected Automatically
  • Browsing activity: pages visited, products viewed, and items added to cart. Used to understand shopping behaviour and improve the site.
  • Device information: device type, browser, and screen size. We do not use fingerprinting or any other technique to identify you without cookies.
  • Referral data: how you found us (search engine, social media, advertising) including marketing campaign parameters.
  • Analytics data: how you use the site, collected through Google Analytics with your consent. We send this through our own server-side tagging service first, so we control what reaches Google.
How Visitor Tracking Works If you accept analytics or marketing cookies, we give your browser a random identifier so we can recognise it when you come back. It does not identify you on its own. If you later place an order or send us a form, we link your earlier browsing to your customer record, so we can see how people find us and what leads to a purchase. If you do not accept these cookies, we do not set the identifier and we do not link your browsing. You can withdraw consent at any time through the cookie settings link at the bottom of every page, or ask us to delete this data.

How We Use Your Information

PurposeLegal Basis
Processing and delivering your ordersContract
Providing therapy services and consultationsConsent
Understanding customer behaviour and improving our productsLegitimate interest
Setting analytics and advertising cookies and pixels on your deviceConsent, through our cookie banner
Measuring which adverts lead to visits and orders, using data collected with that consentLegitimate interest
Using customer lists to show, limit or exclude our adverts (see Advertising Audiences)Legitimate interest for customers; consent for email subscribers
Sending marketing emails and replenishment remindersConsent
Preventing fraud and protecting our websiteLegitimate interest
Meeting tax, legal, and regulatory obligationsLegal obligation
Legitimate Interest Where we rely on legitimate interest, we've assessed that our use is proportionate and does not override your rights. You can object to any legitimate interest processing at any time.

Cookies

We use cookies and similar technologies to keep our site working, remember your cart, understand how visitors use the store, and measure the performance of our advertising.

Types of Cookies We Use
CategoryWhat They Do
EssentialKeep the site functioning. Your cart, login session, and checkout. These cannot be disabled.
AnalyticsHelp us understand how visitors browse the store, which products are popular, and where people drop off. We use Google Analytics with server-side processing for added privacy.
MarketingUsed by Google, Meta, Microsoft and OpenAI to measure which adverts bring visitors to the site and lead to purchases, and to help those platforms show our adverts to people likely to be interested. Only set if you accept marketing cookies.

When you first visit, our banner asks whether you accept analytics and marketing cookies. You can accept all, reject all or choose by category, and rejecting has no effect on browsing or buying. Only essential cookies are set until you choose. You can change your mind at any time using the cookie settings link at the bottom of every page. Our Cookie Policy lists every cookie we use.

Server-side tagging Some of our analytics and advertising data passes through a server we control (measure.breathefirst.co.uk), run for us by Stape. This lets us decide what each provider receives and remove data they do not need. It follows the same cookie choices you make in the banner: if you reject marketing cookies, nothing is sent to advertising platforms.

Who We Share Data With

We never sell your personal data. We share information only with trusted service providers who help us operate the business.

ProviderPurpose
Stripe / PayPalPayment processing
Royal MailOrder delivery
GoogleAnalytics, advertising measurement and advertising audiences
MetaAdvertising measurement and advertising audiences
MicrosoftAdvertising measurement
OpenAIAdvertising measurement
StapeServer-side tagging (runs measure.breathefirst.co.uk on our behalf)
CookieYesRecords your cookie choices
CloudflareWebsite security and performance
SendfoxEmail marketing (opt-in subscribers only)
BrevoSending order, delivery and account emails
CloudwaysWebsite hosting
Advertising Audiences We may share customer and subscriber contact details with Google and Meta so we can show our adverts to existing customers, stop showing them adverts for products they already have, and find people with similar interests. Before your email address or phone number leaves our systems, it is converted into a scrambled code (hashed) that the platform can only match to an account it already holds. The platform deletes anything it cannot match.

We only use order and email subscription details for this. We never use health information, consultation records or therapy notes, and we never build audiences based on a health condition.

We rely on legitimate interest for customers and on your consent for email subscribers. You can opt out at any time by using the unsubscribe link in any of our emails, or by emailing us with "Privacy Request" in the subject. We will remove you from future uploads.
International Transfers Some providers process data outside the UK/EEA. Where this happens, appropriate safeguards are in place including Standard Contractual Clauses.

How Long We Keep Your Data

DataRetentionReason
Order & transaction records6 yearsUK tax requirements
Customer account dataUntil you ask us to delete itOngoing service
Browsing & analytics dataUp to 12 monthsSite improvement
Marketing attribution data12 monthsCampaign measurement
Health & consultation data7 years after last interactionProfessional duty of care
Email marketing preferencesUntil you unsubscribeConsent-based

Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Delete your data ("right to be forgotten")
  • Restrict how we process your data
  • Object to processing based on legitimate interest
  • Port your data to another provider
  • Withdraw consent at any time where consent is the basis
How to Make a Request
  1. Email [email protected] with "Privacy Request" in the subject.
  2. Let us know which right you'd like to exercise.
  3. We'll verify your identity and respond within 30 days.
Complaints If you're not satisfied with our response, you can contact the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.

Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children. Some of our products (such as Myo Munchee) are used by children under parental supervision, in these cases, the parent or guardian is the customer and data subject.

Changes to This Policy

We may update this policy from time to time. The latest version will always be available on this page.

Last updated: September 2026
Questions About Your Data?

Get in Touch

We're happy to answer any questions about how we handle your data.

Subject Line"Privacy Request"
Response TimeWithin 30 days
Email Us