Privacy Policy

This Privacy Policy explains how G-Castle Recovery Ltd t/a HQ Recovery ("HQ Recovery", "we", "us", "our") collects, uses, stores, and protects your personal data when you use our services.

Information You Provide

• Name, email address, and phone number
• Date of birth (18+ verification)
• Emergency contact details
• Waiver consent and booking information
• Communications with our team

Payment Information

Payments are processed securely via Stripe. We do not store full card numbers.

Automatically Collected Data

• IP address, browser type, and device information
• Cookie and analytics data (GA4, Meta Pixel, Hotjar, GHL/Hexona tracking)

Special Category Data

We collect confirmation of acceptance of our Health Commitment Statement only.

We process your personal data under the following legal bases:

Special Category Data Basis

Special category data is processed under Explicit Consent — Article 9(2)(a) of the GDPR.

• Processing bookings and payments
• Sending booking confirmations and reminders
• Ensuring the safety of all facility users
• Providing customer support
• Marketing communications (where consent has been given)
• Analytics and service improvement

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

We share your data only with trusted third-party processors necessary to deliver our services:

Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate protection is in place via Data Privacy Framework (DPF) certification, Standard Contractual Clauses (SCCs), and supplementary technical and organisational measures.

Our services are restricted to individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18.

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at team@hqrecovery.com. We will respond within 30 days.

We implement appropriate technical and organisational security measures to protect your personal data:

We use cookies and similar tracking technologies for analytics, advertising, and improving user experience. A cookie consent banner is provided on your first visit to the site, allowing you to manage your preferences.

Tracking technologies in use include Google Analytics (GA4), Meta Pixel, and Hotjar.

We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations. The "Last Updated" date at the top of this page will be revised accordingly. We encourage you to review this policy regularly.