Privacy Policy

Last updated: 7 October 2026

At Amchara, we are committed to protecting your privacy and handling your personal information responsibly.

Because Amchara services are provided through different businesses, this Privacy Policy explains clearly which company is responsible for your information depending on the service you use.

Some of the information you choose to share with us may relate to your health and wellbeing. We recognise the sensitive nature of this information and take our responsibilities to protect it seriously.

This Privacy Policy explains what information we collect, why we collect it, how we use it, who we may share it with and the rights available to you.

By using our websites, Community, applications or services, you acknowledge that you have read this Privacy Policy.

1. Amchara Community Ltd

Amchara Community

Amchara Community Ltd operates the Amchara Community, including the online Community, member platform, mobile application, events, courses, educational programmes and other Community services.

Amchara Community Ltd is registered in England and Wales under company number 07751531.

Where you join or interact with the Amchara Community, Amchara Community Ltd will generally be the Data Controller responsible for your personal information.

Information we may collect

When you join or use the Community, we may collect information including:

• Your name
• Email address
• Telephone number
• Postal address where required
• Membership and subscription information
• Payment and transaction information
• Your Community profile
• Photographs or profile images you choose to provide
• Events, courses or programmes you register for
• Questions you ask
• Comments and Community posts
• Feedback and survey responses
• Messages between you and the Amchara team
• Information relating to your use of the Community platform or app
• Technical information about the devices you use to access the Community
• Health and wellbeing information you voluntarily provide

Community discussions

The Community is designed to allow members to interact with one another.

Information you choose to post within Community areas may therefore be visible to other members.

This could include comments, questions, photographs, experiences or information about your health and wellbeing.

You should only share information within Community areas that you are comfortable making available to other members of that Community.

Other members are required under our Terms & Conditions to respect the privacy of information shared within the Community.

Health and wellbeing information

Members may choose to discuss their health, lifestyle and wellbeing as part of their participation in the Community.

Health information is treated as Special Category Personal Data and receives additional protection under applicable data protection law.

We will only process this information where we have an appropriate lawful basis and an appropriate condition for processing Special Category Personal Data.

Where appropriate, this may include your explicit consent.

Events and recordings

Some Community events, workshops, talks, coaching sessions or question-and-answer sessions may be recorded and subsequently made available to Community members.

Where an event is being recorded, we will aim to make this clear.

If you participate using your camera, microphone or by asking a question, your contribution may form part of the recording.

Guest experts

The Community may include events or services delivered by independent practitioners, doctors, therapists, coaches, educators or other guest experts.

Where necessary for their participation in an event or service, limited personal information may be made available to them.

Where a practitioner or other professional provides an individual service directly to you, they may have their own responsibilities as a Data Controller and their own privacy information may also apply.

2. Amchara Limited — Retreats

Amchara Limited, registered in Malta under company number C.68523, operates Amchara's residential retreat services.

Its registered and trading address is:

Villagg Ta' Sbejha
Triq Mongur
Gharb
Gozo GRB 1520
Malta

Where you enquire about, book or attend an Amchara retreat, Amchara Limited will generally be the Data Controller responsible for the information required to administer and deliver your retreat.

This may include:

• Your name and contact information
• Booking information
• Payment information
• Accommodation requirements
• Travel information you provide to us
• Dietary requirements
• Emergency contact details
• Attendance information
• Health questionnaires
• Medical history
• Current medications
• Allergies
• Mobility requirements
• Lifestyle and wellbeing information
• Information necessary to help us safely deliver your retreat

Health information may be made available to appropriate members of the retreat team, practitioners, therapists, nurses or healthcare professionals where reasonably necessary for your care, safety or the delivery of the services you have requested.

3. Amchara Medical Ltd — Consultations and Testing

Amchara Medical Ltd, registered in Malta under company number C.91742, provides or supports services including health consultations, functional medicine testing and related health services.

Its registered address is:

Villagg Ta' Sbejha
Triq Mongur
Gharb
Gozo GRB 1520
Malta

Where you undertake a consultation, diagnostic or functional health test or another service provided by Amchara Medical Ltd, it will generally be the Data Controller responsible for information required to provide that service.

This may include:

• Your name and contact details
• Date of birth
• Medical history
• Health questionnaires
• Symptoms
• Lifestyle information
• Medication and supplement information
• Test requests
• Test samples and identifiers
• Laboratory results
• Practitioner notes
• Recommendations
• Consultation records
• Relevant communications

This information may constitute Special Category Personal Data and will be handled with additional safeguards.

Where necessary, relevant information may be shared with laboratories, healthcare practitioners or other specialist providers involved in providing the service you have requested.

4. How the Amchara Businesses Work Together

Amchara Community Ltd, Amchara Limited and Amchara Medical Ltd are separate legal businesses.

Using a service provided by one Amchara business does not mean that every Amchara business automatically has unrestricted access to all of your information.

Information may be shared between the businesses where this is reasonably necessary and legally permitted, for example:

• Where you ask us to arrange another Amchara service for you
• To manage an integrated programme or client journey
• To administer a benefit included within your membership
• To arrange a consultation, test, retreat, course or coaching programme
• To maintain appropriate financial or administrative records
• For client support
• To investigate complaints or service issues
• To protect your health or safety where appropriate
• Where required by law

We aim to share only the information reasonably necessary for the particular purpose.

Detailed health information will not routinely be shared between Amchara businesses for marketing purposes.

5. Other Information We Collect

Depending on how you interact with us, we may also collect the following information.

Communications

If you contact us, we may keep records of communications including:

• Emails
• Telephone conversations
• Website enquiries
• Online chat conversations
• Messages
• Contact forms
• Customer support requests

Website and app information

When you use an Amchara website, app or online platform, information may automatically be collected including:

• IP address
• Browser type
• Device type
• Operating system
• Pages viewed
• App or website activity
• Approximate location
• Referring website
• Login activity
• Website and application performance information

We use this information to operate, protect and improve our digital services.

Payments

Where you make a payment, information necessary to process and record that transaction may be processed by Amchara and our payment service providers.

Card payments are generally processed by specialist payment providers. We do not normally need to store your complete card details ourselves.

6. How We Use Your Information

Depending on the service involved, we may use your information to:

• Create and administer your Community membership
• Provide access to the Community platform and app
• Manage subscriptions
• Deliver events and programmes
• Manage retreat bookings
• Deliver consultations and health services
• Arrange functional testing
• Provide customer and member support
• Respond to enquiries
• Communicate with you about services you have purchased
• Personalise the services we provide
• Maintain appropriate client and health records
• Protect the health and safety of clients and members
• Process payments
• Prevent fraud and misuse
• Moderate Community activity
• Protect the security of our systems
• Improve our websites, applications and services
• Analyse how our services are being used
• Maintain business and financial records
• Meet legal and regulatory obligations
• Send information you have requested
• Send marketing communications where permitted by law

7. Our Lawful Basis for Using Your Information

Depending on why information is being used, we may rely upon one or more lawful bases including:

Performance of a contract

Where processing is necessary to provide a membership, retreat, consultation, course, test or other service you have purchased or requested.

Consent

Where you have given us permission to use your information for a particular purpose.

You may withdraw consent where processing is based upon consent.

Legitimate interests

We may process information where reasonably necessary to operate and improve our businesses, communicate with clients, provide customer support, maintain security, prevent misuse or understand how our services are performing.

Where we rely upon legitimate interests, we consider those interests against your privacy rights.

Legal obligations

We may process information where required to comply with legal, regulatory, accounting or other obligations.

Vital interests

In exceptional circumstances, information may be processed where necessary to protect someone's life or physical safety.

Special Category Personal Data

Health information and certain other sensitive information receive additional protection.

Where we process Special Category Personal Data, we will identify an appropriate condition under applicable data protection legislation in addition to our normal lawful basis.

Depending upon the circumstances this may include explicit consent or provisions relating to health or healthcare services.

8. Marketing Communications

Where permitted, we may send you information about:

• Amchara Community
• Retreats
• Events
• Courses
• Health information
• Educational content
• Consultations
• Testing
• Coaching
• Supplements
• News
• Special offers and promotions

You can unsubscribe from marketing emails at any time by using the unsubscribe link contained within our emails or by contacting us.

Where one Amchara business wishes to use information to market services provided by another Amchara business, we will only do so where permitted under applicable data protection and electronic marketing laws.

Unsubscribing from marketing communications will not prevent us from sending messages necessary to administer a service you have purchased.

9. Sharing Your Information

We do not sell your personal information.

We may share information where reasonably necessary with trusted organisations that help us provide and operate our services.

These may include providers of:

• Community and membership platforms
• Mobile applications
• Customer relationship management systems
• Booking and scheduling systems
• Payment processing
• Website hosting
• Cloud infrastructure
• Email and communications
• Marketing platforms
• Website and app analytics
• Video conferencing
• Event hosting
• Laboratories
• Healthcare and wellbeing services
• Technical support
• Accounting and financial services
• Professional advice

We may also disclose information:

• Where required by law
• To regulators or public authorities
• To investigate fraud or unlawful activity
• To establish, exercise or defend legal rights
• Where necessary to protect someone's safety

Where organisations process personal information on our behalf, we require appropriate arrangements to protect that information.

10. International Transfers

The Amchara businesses operate across the United Kingdom and Malta and use technology and service providers which may operate internationally.

Personal information may therefore be processed in the UK, European Economic Area or other countries.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with applicable data protection legislation.

This may include relying on recognised adequacy arrangements or putting appropriate contractual and organisational safeguards in place.

11. Data Security

We use appropriate technical and organisational measures designed to protect personal information against:

• Unauthorised access
• Loss
• Misuse
• Disclosure
• Alteration
• Destruction

Access to sensitive information is restricted to people who reasonably require it for their role.

No technology can guarantee complete security, but we regularly review how information is stored and protected.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet relevant legal, financial, regulatory, clinical and operational requirements.

Different types of information may therefore be retained for different periods.

For example:

• Membership information may be retained while your membership is active and for an appropriate period afterwards.
• Financial and transaction information may be retained where required for accounting or taxation purposes.
• Health and consultation records may be retained in accordance with applicable professional, legal or regulatory requirements.
• Community content may remain available while relevant to the Community, subject to our moderation and retention practices.
• Back-up copies may remain temporarily within secure systems after information has been deleted from active systems.

Where information is no longer required, it will be securely deleted, anonymised or otherwise appropriately disposed of.

13. Cookies and Analytics

Our websites and digital platforms may use cookies and similar technologies to:

• Operate essential website features
• Remember preferences
• Understand website and app usage
• Measure performance
• Improve our services
• Understand the effectiveness of communications and marketing

Where legally required, we will ask for consent before placing non-essential cookies or similar technologies on your device.

Please refer to our Cookie Policy for further information.

14. Artificial Intelligence

We may use artificial intelligence and automated technologies to help us operate and improve our services.

This may include helping with:

• Customer support
• Website assistance
• Administration
• Analysis
• Content organisation
• Improving the member and client experience

Where AI systems process personal information, they remain subject to our privacy and data protection responsibilities.

We do not make decisions which have a significant legal or similarly significant effect upon you solely through automated processing unless permitted by law and appropriate protections are in place.

15. Your Data Protection Rights

Depending upon the circumstances and applicable law, you may have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of information
• Request restriction of processing
• Object to certain processing
• Request transfer of your information where applicable
• Withdraw consent where processing relies upon consent
• Object to direct marketing
• Lodge a complaint with the relevant data protection authority

These rights are not absolute and may depend upon the circumstances and applicable law.

We aim to respond to requests within the timescales required by law.

16. Children's Privacy

Our services are primarily intended for adults.

Where we provide services involving children or collect information relating to children, we will only do so where appropriate and in accordance with applicable data protection requirements.

17. Third-Party Websites and Services

Our websites, Community and applications may contain links to external websites or services.

We are not responsible for the privacy practices of independent third parties and encourage you to review their privacy policies before providing personal information to them.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our businesses, services, technology or legal requirements.

The latest version will be published on this page together with the date on which it was last updated.

Where a change is particularly significant, we may also bring it to the attention of affected clients or members.

19. Contact Us

For questions about this Privacy Policy, how we use your information or to exercise your data protection rights, please contact:

Email: change@amchara.com

Please let us know which Amchara service your request relates to so that we can direct it to the appropriate company.

For Amchara Community Ltd correspondence:

Amchara Community Ltd
Company number 07751531
Office 6
251–255 Church Road
Benfleet
Essex
SS7 4QP
United Kingdom

For Amchara Limited and Amchara Medical Ltd:

Villagg Ta' Sbejha
Triq Mongur
Gharb
Gozo GRB 1520
Malta

If you remain dissatisfied with how your information has been handled, you may have the right to complain to the relevant supervisory authority.

For matters falling under UK data protection law this is the Information Commissioner's Office (ICO).

For matters falling under Maltese or EU data protection law this may be the Office of the Information and Data Protection Commissioner (IDPC) in Malta.