1. Who is responsible
Peak Brain Ltd, trading as Peak Brain UK, is the controller for UK client and website information unless written enrolment materials identify another controller. Company number 14897377. Registered office: 128 City Road, London EC1V 2NX. Client service address: Suite 29, Niddry Lodge, Holland Street, London W8 7JB.
Privacy contact: info@peakbrain.co.uk.
2. Information we collect
- Identity and contact: name, age or date of birth where needed, email, telephone, address, representatives, emergency contacts and identity evidence for a rights request.
- Enrolment and administration: enquiries, appointments, orders, payments, invoices, signed agreements, programme status, communications, shipping and equipment assignments.
- Brain, health and coaching: relevant history, goals, sleep, stress, attention, symptoms, EEG/QEEG recordings, maps, reports, protocols, progress measures, device readings and support notes.
- Remote support: messages and files shared in a private client channel, setup information and support activity.
- Website and device: IP address, browser and device details, referral information, page use, cookie choices and limited security or analytics events.
Please do not put detailed health information in a general enquiry form or ordinary email unless we ask. We may move the conversation to an approved private support channel.
3. How and why we use it
We use information to respond to enquiries; form and administer a contract; provide in-office QEEG, neurofeedback, coaching and remote support; personalise protocols; coordinate the authorised team; schedule, bill and ship equipment; secure and improve services; and meet accounting, insurance, legal and safeguarding duties.
Our Article 6 bases may include steps at your request before contract, performance of a contract, legal obligation, legitimate interests in operating and protecting the service, and consent where appropriate. Brain and health information can be special-category data. Where explicit consent is the appropriate Article 9 condition, we ask for it separately and record it. Withdrawal is prospective and does not invalidate earlier processing or prevent processing required for records, payment, safety or legal claims.
We do not use identifiable QEEG, health, coaching or private-channel information for unrelated advertising, testimonials or general-purpose AI model training without a separate lawful basis and permission where required.
4. Staff and confidentiality
Our default
Assume every client record is confidential.
Peak Brain is a small organisation. The primary provider and the UK or global staff and coaches enabled to support a client may access the information reasonably needed for QEEG review, protocol design, coaching, equipment, safety, payment and administration. Access is for assigned work—not curiosity, gossip, personal projects or unrelated marketing—and confidentiality continues after work ends.
Remote clients may have a separate private Slack channel. It is not shared with other clients. A team member is added when supporting that client and removed when access is no longer needed. Earlier messages may be reviewed when reasonably necessary to continue support.
6. International access
The Peak Brain global support team and some processors operate outside the UK, including in the United States. Where a restricted transfer occurs, we use an applicable UK adequacy regulation or appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum, together with the required transfer assessment. Contact us for information about the applicable safeguard.
7. Retention and security
We keep information only as long as reasonably needed for the enquiry or programme and for applicable tax, accounting, insurance, security, contractual, limitation, safeguarding and recordkeeping requirements. The period depends on the record, participant age, continuing relationship and any legal hold. When no longer needed, information is deleted, de-identified or placed beyond routine use.
Safeguards may include access controls, multi-factor authentication, encryption, approved systems, backups, staff confidentiality and training, vendor review, incident response and secure disposal. No system is perfectly secure. We investigate and notify affected people and regulators when the law requires it.
8. Your rights
Depending on the processing and legal basis, you may ask for access, correction, erasure, restriction or portability; object to processing; withdraw consent; and complain to the Information Commissioner’s Office. Rights have legal exceptions, and we may verify identity and authority.
You have the right to object to direct marketing at any time. You may also object to processing based on legitimate interests; we will stop unless we demonstrate compelling lawful grounds or need the information for legal claims.
10. Changes
We may revise this notice when services, systems or law change. We will post a new “Last updated” date and provide additional notice before a materially different use where required.
11. Contact and complaints
Peak Brain Ltd · Peak Brain UK
Suite 29, Niddry Lodge, Holland Street
London W8 7JB
You may complain to the Information Commissioner’s Office. Contacting us first is welcome but not required.
Related client document: Programme Agreement and Informed Consent.
For urgent medical or safety concerns, do not use the privacy email or website form. Contact an appropriate emergency or medical service.