Privacy Policy
Last updated: August 2026 | Fourth & Beyond Limited
1. Who We Are
Fourth & Beyond Ltd ('Fourth & Beyond', 'we', 'us', or 'our') is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, and safeguard your information.
Company Name: Fourth & Beyond Ltd
Company Number: 17370274
Registered Address: 66 Paul Street, London EC2A 4NA
Contact: hello@fourthandbeyond.com
Website: fourthandbeyond.com
2. What Information We Collect
2.1 Contact Details
We collect your name, email address, phone number, and postal address. We use this information to provide our services, communicate with you about your care, manage your account, and respond to your enquiries. The lawful basis for this processing is the performance of our contract with you and our legitimate interests in providing customer service.
2.2 Health and Wellness Information
We collect information about your postnatal health and wellness to provide tailored care and support services. This is special category data under UK GDPR. We process this information based on your explicit consent and because it is necessary for the provision of healthcare and health management services. You can withdraw your consent at any time, though this may affect our ability to provide services to you.
2.3 Payment Information
We collect payment details necessary to process transactions and issue invoices. We do not store full payment card details ourselves; these are securely processed by our payment service provider. The lawful basis for this processing is the performance of our contract with you and compliance with legal obligations such as tax and accounting requirements.
2.4 Usage Data
When you use our website, we collect information about how you interact with our services, including pages visited, features used, and technical information such as your IP address, browser type, and device information. We use this information to improve our services, ensure security, and analyse performance. The lawful basis for this processing is our legitimate interests in improving and securing our services, as well as your consent for non-essential cookies.
2.5 Marketing Preferences
If you consent to receive marketing communications, we collect and store your preferences for newsletters, updates, and promotional content. The lawful basis for this processing is your consent, which you can withdraw at any time using the unsubscribe link in our emails or by contacting us directly.
2.6 Information from Third Parties
We may receive information from:
Healthcare professionals (with your consent)
Payment processors
Website analytics providers
Social media platforms (if you interact with us there)
3. How We Use Your Information
3.1 Service Delivery
Providing postpartum care and wellness products and services
Creating and managing your account
Communicating with you about your order and care
Processing orders and bookings
Sending service-related notifications
3.2 Business Operations
Processing payments and invoicing
Responding to enquiries and providing customer support
Improving and developing our services
Internal record keeping and administration
Analysing service usage to enhance user experience
3.3 Legal and Compliance
Complying with legal obligations (tax, accounting, regulatory)
Protecting our legal rights and interests
Preventing fraud and ensuring security
Responding to legal requests and investigations
3.4 Marketing (with your consent)
Sending newsletters and updates about our services
Informing you of new products or features
Personalising your experience with relevant content
Conducting customer surveys and gathering feedback
4. Lawful Basis for Processing
4.1 Consent
You have given clear, specific, and informed consent for us to process your personal data for particular purposes. This applies to processing special category health data, marketing communications, and non-essential website cookies and analytics. You can withdraw your consent at any time by contacting us.
4.2 Contract
Processing is necessary to provide the services you have requested or to take steps before entering into a contract with you. This includes managing your account, delivering our postpartum care products and services, processing payments, and communicating about your order.
4.3 Legal Obligation
We must process your data to comply with legal requirements, including tax and accounting obligations, responding to lawful requests from authorities, and healthcare record-keeping requirements.
4.4 Legitimate Interests
Processing is necessary for our legitimate interests or those of a third party, provided your rights and freedoms do not override those interests. This includes improving our services and website, fraud prevention, business analytics, and internal administration.
5. Who We Share Your Data With
5.1 Service Providers
We work with carefully selected third-party service providers who process data on our behalf, including IT and hosting providers, payment processors, email platforms, cloud storage providers, analytics providers, and CRM systems. All providers are contractually bound by data processing agreements and may only process your data according to our instructions.
5.2 Healthcare and Wellbeing Professionals
With your explicit consent, we may share relevant health information with clinical advisors, healthcare providers, or wellbeing service partners (such as pelvic physiotherapists or perinatal counsellors) to facilitate the services you have requested.
5.3 Legal and Regulatory Authorities
We may disclose your data when required by law or in response to valid legal requests from law enforcement agencies, regulatory bodies, courts, or tax authorities (HMRC).
5.4 Professional Advisers
We may share data with lawyers, accountants, auditors, or insurers when necessary for obtaining professional advice or managing business risks.
5.5 Business Transfers
If Fourth & Beyond Ltd is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.
6. International Transfers
We primarily store and process your data within the United Kingdom. If we need to transfer your data outside the UK, we will ensure appropriate safeguards are in place, such as transfers to countries with an adequacy decision from the UK government, Standard Contractual Clauses approved by the ICO, or service provider certifications demonstrating appropriate safeguards.
7. How Long We Keep Your Data
7.1 Health and Wellness Records
We retain postnatal health and wellness records for 7 years after your last service.
7.2 Active Customer Accounts
We retain your account information while your account is active and you continue to use our services.
7.3 Inactive Customer Accounts
For customer contact and non-health information, we retain data for up to 7 years after your last contact or service. We review inactive accounts regularly and may delete data sooner if it is no longer needed.
7.4 Financial Records
We are legally required to retain financial records for a minimum of 7 years after the end of the relevant financial year, as required by HMRC regulations.
7.5 Marketing Communications
We retain your marketing preferences until you withdraw consent. After withdrawal, we keep a suppression record but delete other marketing data within one month.
7.6 Website Analytics
Website usage data and analytics are typically retained for 26 months.
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
8.1 Right of Access
You have the right to request a copy of the personal data we hold about you (a Subject Access Request). We will respond within one month.
8.2 Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data about you.
8.3 Right to Erasure
In certain circumstances, you have the right to request deletion of your personal data, subject to legal retention obligations.
8.4 Right to Restrict Processing
You can request that we limit how we use your data in certain situations, such as when you contest the accuracy of the data.
8.5 Right to Data Portability
Where we process your data based on consent or contract and the processing is automated, you have the right to receive your data in a structured, machine-readable format.
8.6 Right to Object
You have the right to object to processing of your personal data for direct marketing (we must stop immediately) or based on legitimate interests.
8.7 Right to Withdraw Consent
Where we process your data based on consent, you can withdraw that consent at any time by using the unsubscribe link in emails, updating your account preferences, or contacting us at hello@fourthandbeyond.com.
To exercise any of these rights, please contact us at hello@fourthandbeyond.com. We will respond within one month and may need to verify your identity before processing your request.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction, or damage.
Technical measures include: encryption of data in transit and at rest; multi-factor authentication for system access; regular security updates and vulnerability assessments; and secure backup and disaster recovery procedures.
Organisational measures include: confidentiality agreements with all employees and contractors; access controls based on need-to-know; clear data protection responsibilities; and incident response procedures.
In the event of a data breach likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and report the breach to the ICO within 72 hours where required by law.
10. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to provide and improve our services.
Essential Cookies: Necessary for the website to function properly. You cannot opt out of these.
Performance and Analytics Cookies: Help us understand how visitors interact with our website.
Functionality Cookies: Enable enhanced functionality and personalisation.
Marketing Cookies: Used to display relevant content and may be set by third-party partners.
You can control cookie preferences through our cookie consent banner, your browser settings, or opt-out tools provided by advertising networks.
11. Marketing Communications
We will only send you marketing communications if you have given us your consent or where we have a legitimate interest to do so. You can opt out at any time by clicking the unsubscribe link in any marketing email, updating your preferences in your account settings, or contacting us directly. Opting out will not affect essential service communications such as order confirmations.
12. Children's Data
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 18 without appropriate parental or guardian consent. While we may hold information about babies and children as part of our postpartum care services, this is collected from and with the consent of the parent or guardian. If you believe we have inadvertently collected information from a child without proper consent, please contact us immediately.
13. Third-Party Websites
Our website may contain links to third-party websites or services. This Privacy Notice applies only to our own website and services. We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy notices.
14. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our practices, legal requirements, or business operations. When we make significant changes, we will notify you by email and display a prominent notice on our website. The 'Last Updated' date at the top of this notice indicates when it was last revised.
15. Contact Us
If you have any questions about this Privacy Notice, how we handle your personal data, or wish to exercise any of your rights, please contact us:
Fourth & Beyond Ltd
Email: hello@fourthandbeyond.com
Website: fourthandbeyond.com
Address: 66 Paul Street, London EC2A 4NA
16. Complaints
We take your privacy concerns seriously. If you have a concern, please contact us first. We will acknowledge your complaint within 5 working days and provide a full response within 30 days.
You also have the right to lodge a complaint with the ICO at any time:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Phone: 0303 123 1113
Website: www.ico.org.uk
This Privacy Notice was last updated in August 2026 and reflects our commitment to protecting your personal data in accordance with UK GDPR and the Data Protection Act 2018.