B-MÓR Privacy Policy

Effective Date: 11/11/2026

Last Updated: 11/11/2026

Version: 1.0

1. Introduction and who we are

B-MÓR Ltd. trading as B-MÓR, Enda Quealy, Hypno Resets and/or related brands, referred to in this Privacy Policy as "B-MÓR", "we", "us" or "our", respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains:

  • what personal data we collect;
  • how and why we collect it;
  • how we use it;
  • who we may share it with;
  • how long we keep it;
  • how we protect it;
  • your rights in relation to your personal data.

This Privacy Policy applies to our websites, products, programmes, digital products, 1:1 services, forms, emails, resources, communities, events and client communications.

This includes, but is not limited to:

  • Be More 1-to-1
  • The Performance Switch Group
  • The Moment
  • Hypno Reset Series;
  • Ultimate Reset Bundle;
  • Burnout Recovery Protocol;
  • Stress Release Protocol;
  • Stress Reset;
  • Deep Sleep Reset;
  • Deep Sleep Live;
  • ThriveLearn resources;
  • any future B-MÓR products, programmes or services.

For UK data protection purposes, B-MÓR Ltd. is the data controller responsible for your personal data.

  • Business name: B-MÓR Ltd.
  • Business registration: 15828925
  • Business address: Suite A, 82 James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
  • ICO registration number: 00014230370

If you have any questions about this Privacy Policy or how we handle your personal data, contact us at:

2. Who this policy applies to

This Privacy Policy applies to personal data we collect from:

  • website visitors;
  • prospective clients;
  • sales call applicants;
  • customers;
  • clients;
  • programme participants;
  • email subscribers;
  • people who contact us through email, forms, social media or support channels;
  • people who provide testimonials, feedback or case studies;
  • people who access our digital products, live Sessions or 1:1 programmes.

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children.

3. Personal data we collect

We may collect and process the following categories of personal data.

3.1 Contact and identity information

This may include:

  • full name;
  • email address;
  • phone number, if provided;
  • country or region;
  • billing address;
  • professional title, company or business details, if provided;
  • social media profile links, if you choose to share them.

3.2 Purchase and payment information

This may include:

  • products or programmes purchased;
  • payment status;
  • transaction history;
  • payment plan status, where applicable;
  • billing information;
  • invoices and receipts;
  • refund, chargeback or dispute records.

We do not store full payment card details. Payment card details are processed by our payment providers.

3.3 Account and access information

This may include:


  • login details for course or learning platforms;
  • course or Programme enrolment data;
  • access permissions;
  • resource access records;
  • progress tracking;
  • digital product usage;
  • support access history.

3.4 Sales call and fit information

If you apply for or book a call with us, we may collect:

  • your answers to booking or pre-call questions;
  • information about the challenge you want support with;
  • where it is affecting you;
  • why you are seeking support now;
  • what you have already tried;
  • what you would like to change;
  • sales call booking and attendance information;
  • relevant information you choose to share during the call;
  • written notes, transcripts or summaries created from the call, including where an AI-assisted note-taking or transcription tool is used;
  • internal fit and suitability notes;
  • internal notes about concerns or matters requiring clarification;
  • the B-MÓR programme, product or other route recommended;
  • reasons for that recommendation;
  • notes about what was offered, quoted or agreed;
  • proposed start dates or follow-up actions;
  • payment-link and offer status.

We use this information to understand whether B-MÓR is an appropriate fit, whether a particular programme or self-directed product may be suitable, and whether there is any reason we should not offer an engagement.

Where we use an AI-assisted note-taking or transcription tool during a fit call, we use it to help create an accurate written record so Enda can remain focused on the conversation and review the information afterwards.

We will tell you when such a tool is being used.

If you do not want an AI-assisted note-taking or transcription tool used during your call, you can tell us and we can take appropriate manual notes instead.

Final decisions about whether to offer a Programme are made by B-MÓR and are not automated clinical or medical assessments.

3.5 Programme onboarding and baseline information

For higher-touch programmes, including Be More and The Performance Switch, we may collect information that establishes your starting point and helps us prepare for and deliver the work.

Depending on the Programme, this may include information from an onboarding questionnaire, The Mirror or another baseline and discovery process.

This may include:

  • your reasons for joining;
  • the challenge you want to change;
  • why it matters now;
  • where the issue shows up in your work or life;
  • where else you believe it may be affecting you;
  • examples of relevant situations or patterns;
  • what the issue has been costing you;
  • what you would like to feel, do or respond to differently;
  • what would show you that something had changed;
  • what you have already tried;
  • relevant information about work, relationships, sleep, stress, health, habits, behaviour or personal circumstances that you choose to share;
  • relevant personal, emotional, practical or medical information you choose to provide.

For Be More, this includes information supplied through The Mirror, which provides the starting point used to prepare for the work and later understand what has changed.

You are not required to provide information that is unrelated to the Programme.

3.6 Reflections, progress and outcome information

We may collect information through:

  • post-session journals;
  • short Reflections;
  • Final Reflections;
  • Progress Reviews;
  • integration notes;
  • follow-up communications;
  • support messages sent during or after a Programme;
  • final Programme reviews or personalised plans.

This may include information about:

  • what you are noticing following a Session;
  • changes in thoughts, feelings, reactions, behaviour or physical sensations;
  • decisions, communication, work, money, relationships, sleep, energy, confidence or day-to-day behaviour;
  • what feels easier, quieter, clearer, different, unresolved or unchanged;
  • examples of situations where you responded differently;
  • changes noticed by other people;
  • new issues or patterns that have become clearer;
  • concerns you want B-MÓR to know about;
  • what you believe has or has not changed during the Programme.

For Be More, information from The Mirror, Post-Switch Journal, Post-Amplifier Journal and Final Reflection may be considered together to understand your starting point, changes during the engagement and the basis of the final review and personalised 90-Day Plan.

3.7 Session and client delivery information

Where you participate in private Sessions or other live support, we may collect:

  • scheduling information;
  • attendance records;
  • Session preparation confirmations;
  • records of whether required preparation steps were followed;
  • records of interruptions, missed Sessions or rescheduling;
  • relevant notes made by Enda or the B-MÓR team;
  • information needed to prepare for or deliver Sessions;
  • relevant support requests and communications;
  • records of Programme steps completed or outstanding;
  • information relevant to deciding whether the engagement should continue;
  • records relevant to a refund, complaint or dispute.

For some programmes, Session preparation may include confirmation that you are attending from an appropriate private environment, have taken reasonable steps to avoid interruption and have turned off unnecessary notifications or distractions.

These records help B-MÓR protect the quality of the Programme and, where relevant, establish whether the Programme was materially completed as designed.

Unless we tell you otherwise and obtain any required consent, private Programme Sessions are not normally provided as client recordings.

3.8 Communication data

This may include:

  • emails you send us;
  • support tickets;
  • replies to automated emails;
  • WhatsApp or other Programme support messages;
  • messages through social media;
  • customer service records;
  • complaints;
  • cancellation or refund requests;
  • testimonial communications.

3.9 Testimonial, feedback and case study information

If you choose to provide a testimonial, case study or feedback, we may collect:

  • your written or video testimonial;
  • your name;
  • role, business name or professional details, if you agree;
  • image or likeness, if you provide it;
  • consent records;
  • approval records;
  • any limitations you place on how your testimonial can be used.

We only use identifiable testimonials or case studies with your clear written consent.

3.10 Marketing and preference data

This may include:

  • email subscription status;
  • email preferences;
  • marketing consent;
  • unsubscribe records;
  • email open and click data, where used;
  • lead source;
  • campaign information;
  • content preferences.

3.11 Website, technical and analytics data

When you visit our websites or use our online resources, we may collect:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • approximate location;
  • pages visited;
  • time spent on pages;
  • referring website;
  • links clicked;
  • login data;
  • cookie data;
  • error reports;
  • performance data.

See the Cookies section below for more information.

4. Sensitive personal data and special category data

Some of the information you choose to share with us may be sensitive.

This may include information about:

  • physical health;
  • mental health;
  • stress;
  • sleep;
  • emotional wellbeing;
  • medication or medical feedback;
  • trauma or difficult life events;
  • substance use or behaviours used to manage pressure;
  • family or relationship matters;
  • other personal or sensitive circumstances.

Under UK data protection law, some of this may be classed as special category data, which requires additional protection.

We do not ask you to provide full medical records or information that is not relevant to the Programme.

However, you may choose to share sensitive information through a fit call, The Mirror, onboarding forms, journals, Reflections, support messages or Sessions if you believe it is relevant.

We process this information only where necessary and appropriate for purposes such as:

  • assessing whether B-MÓR appears to be an appropriate fit;
  • preparing for and delivering Sessions;
  • supporting you through a Programme;
  • understanding relevant risks or limitations;
  • responding to your support requests;
  • managing complaints, cancellations, refund requests or disputes;
  • protecting your safety, our team and the integrity of the work.

Where required, we will rely on your explicit consent to process special category data.

In some circumstances, we may also process limited sensitive information where necessary to establish, exercise or defend legal claims or where required by law.

You should not provide sensitive information that you do not want us to hold or use for these purposes.

5. Information we do not intentionally collect

We do not intentionally collect:

  • full payment card numbers;
  • government ID numbers, unless legally required in a specific situation;
  • biometric data;
  • children's data;
  • full medical records;
  • information that is not relevant to your purchase, Programme, support request or client relationship.

If you choose to provide unnecessary sensitive information, we may delete it, disregard it or ask you to provide a more relevant version.

6. How we collect your personal data

6.1 Directly from you

This includes when you:

  • visit our website;
  • join our email list;
  • purchase a product or Programme;
  • book a fit or sales call;
  • complete pre-call questions;
  • speak with us during a fit or sales call;
  • complete an onboarding questionnaire;
  • complete The Mirror;
  • complete a post-session journal;
  • complete a Reflection or Final Reflection;
  • complete a Progress Review;
  • send us an email or Programme support message;
  • submit a testimonial;
  • contact support;
  • reply to a follow-up email.

6.2 Through third-party platforms

We may collect or receive information through platforms used to operate and deliver our services, including:

  • payment processors;
  • checkout platforms;
  • learning platforms;
  • form providers;
  • CRM and email platforms;
  • booking and calendar tools;
  • video-call platforms;
  • email and cloud-storage providers;
  • AI-assisted note-taking or transcription tools;
  • other AI-assisted tools;
  • analytics tools;
  • communication platforms.

6.3 Automatically

We may collect technical and usage data automatically through:

  • cookies;
  • analytics tools;
  • website tracking;
  • platform access logs;
  • email open and click tracking;
  • learning-platform activity logs.

6.4 From social media or public sources

If you interact with us on LinkedIn, X, Instagram, Facebook or other platforms, we may process information you make available through those platforms, such as your name, profile, messages, comments or public posts.

We do not buy personal data from third-party data brokers.

7. How we use your personal data

7.1 To provide products, programmes and services

This includes:

  • processing your order;
  • creating your account;
  • granting access to digital products and Programme resources;
  • sending Programme information and materials;
  • scheduling Sessions;
  • delivering private and group Sessions;
  • preparing for Sessions;
  • reviewing onboarding and baseline information;
  • reviewing The Mirror, journals and Reflections where relevant;
  • providing support during a Programme;
  • creating Programme reviews, Progress Reflection Reports or personalised plans where included;
  • administering access to audios, tools and protocols;
  • responding to support requests;
  • managing Programme completion and follow-up.

7.2 To manage higher-touch client journeys

For programmes such as Be More and The Performance Switch, we may use personal data to:

  • assess whether B-MÓR appears to be an appropriate fit;
  • decide which Programme, product or other route may be most appropriate;
  • identify concerns requiring clarification before an offer is made;
  • record what was recommended, offered or agreed;
  • send payment and onboarding information;
  • create and manage your Programme account;
  • grant access to relevant digital resources;
  • monitor completion of required Programme steps;
  • review onboarding information, The Mirror, journals, Reflections or other baseline information;
  • prepare for private Sessions;
  • send Session preparation information and reminders;
  • record attendance, rescheduling and relevant preparation information;
  • provide support during the Programme;
  • identify whether anything has arisen that may make the Programme no longer appropriate;
  • create final reviews, reflection reports or personalised plans;
  • understand changes reported during the Programme;
  • assess a refund request or other outcome-based commitment where relevant;
  • maintain an accurate record of the client journey.

The specific steps and information used will depend on the Programme you purchase.

7.3 To communicate with you

This includes:

  • order confirmations;
  • receipts;
  • access instructions;
  • Programme updates;
  • Session reminders;
  • journal or Reflection reminders;
  • support replies;
  • important account notices;
  • cancellation or refund communications;
  • follow-up emails.

7.4 To manage cancellations, refunds, withdrawals, complaints and disputes

We may use relevant records to assess or respond to:

  • statutory cancellation requests;
  • voluntary withdrawal requests;
  • Programme refund requests;
  • no-change or other outcome-based refund commitments;
  • complaints;
  • payment disputes;
  • chargebacks;
  • legal claims.

Relevant records may include:

  • payment history;
  • checkout and Terms acceptance records;
  • sales-call and fit records;
  • information about what was offered or agreed;
  • The Mirror or other baseline information;
  • onboarding submissions;
  • journals and Reflections;
  • Final Reflections or Progress Reviews;
  • Session attendance;
  • Session preparation records;
  • records of interruptions or rescheduling;
  • support communications;
  • relevant Programme notes;
  • access logs;
  • records of required steps being completed;
  • final Programme reviews.

We use only information reasonably relevant to the issue being considered.

This information helps us assess requests fairly, understand whether the Programme was materially completed as designed, establish what services were provided and protect the rights of both the client and B-MÓR.

7.5 To improve our products, services and messaging

We may review client responses, support questions, journal language, feedback and outcomes to improve:

  • Programme delivery;
  • client experience;
  • onboarding forms;
  • journals and Reflection prompts;
  • emails;
  • offers;
  • sales pages;
  • resources;
  • future products.

Where possible, this is done using anonymised or aggregated information.

We may use non-identifiable client language internally to improve our messaging and delivery.

We will not use your identifiable story, name, image, business name or testimonial publicly without appropriate permission.

7.6 To send marketing communications

Where you have consented or where otherwise permitted by law, we may send you:

  • educational emails;
  • product updates;
  • new Programme announcements;
  • relevant offers;
  • event invitations;
  • content recommendations.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link or emailing:

You will still receive transactional or service-related communications such as purchase confirmations, access instructions, support replies and Programme communications.

7.7 To protect our business and rights

We may process data to:

  • prevent fraud;
  • protect our intellectual property;
  • enforce our Terms & Conditions;
  • manage payment disputes;
  • protect client safety;
  • protect our team;
  • maintain appropriate business records;
  • comply with legal obligations.

8. Lawful bases for processing

Under UK GDPR, we need a lawful basis to process personal data.

Depending on the situation, we may rely on the following lawful bases.

8.1 Contract

We process personal data where necessary to take steps at your request before entering into a contract or to provide products, services or programmes you have purchased.

Examples include:

  • responding to a Programme enquiry;
  • assessing which B-MÓR route may be appropriate;
  • processing your purchase;
  • giving you access to Programme resources;
  • delivering Sessions;
  • managing bookings;
  • sending Programme communications;
  • reviewing required Programme information;
  • providing support;
  • preparing final reviews, reports or personalised plans;
  • administering contractual cancellation or refund provisions.

8.2 Legitimate interests

We may process personal data where it is necessary for our legitimate business interests and where your rights do not override those interests.

Examples include:

  • improving products and services;
  • managing client journeys;
  • maintaining accurate call and client notes;
  • tracking completion of required Programme steps;
  • preventing fraud;
  • managing disputes;
  • maintaining business records;
  • reviewing anonymised or aggregated feedback;
  • improving website performance.

8.3 Consent

We rely on consent for certain activities where required, such as:

  • optional marketing communications;
  • optional cookies;
  • testimonials and case studies;
  • use of your name, image, company or identifiable story;
  • processing special category data where explicit consent is required.

You can withdraw consent at any time.

Withdrawing consent does not affect processing that happened before consent was withdrawn.

8.4 Legal obligation

We may process personal data to comply with legal obligations, including:

  • tax and accounting requirements;
  • responding to lawful requests;
  • record keeping;
  • consumer protection obligations;
  • data protection obligations.

8.5 Legal claims

Where necessary, we may process personal data, including limited sensitive information, to establish, exercise or defend legal claims.

This may include:

  • complaints;
  • disputes;
  • cancellation or refund requests;
  • chargebacks;
  • legal proceedings.

9. AI-assisted tools and automated processing

We may use AI-assisted tools to support the operation and delivery of our services.

AI-assisted tools may be used to:

  • create transcripts, notes or summaries from fit calls or other permitted conversations;
  • summarise booking or sales-call information;
  • summarise The Mirror, onboarding questionnaires, journals or Reflections;
  • prepare internal notes;
  • identify incomplete or potentially inconsistent Programme information for human review;
  • identify missing Programme steps;
  • draft support replies for human review;
  • assist with draft Progress Reflection Reports, final reviews or personalised plans;
  • help manage CRM stages and operational workflows;
  • flag records that may require human attention.

We do not use AI tools to make final decisions about:

  • whether you are suitable for a Programme;
  • which Programme you must purchase;
  • whether your engagement should be ended;
  • whether you are clinically safe or unsafe;
  • whether you qualify for a refund;
  • any decision with legal or similarly significant effects.

Those decisions are made by humans.

Where AI-assisted tools are used, we select providers and settings appropriate for the confidentiality and sensitivity of the information being processed and take reasonable steps to protect personal data.

Where available, we use business or enterprise settings that do not use client personal data to train public AI models.

We may also use rule-based automation to send reminders, update workflow stages or alert the team when a Programme step is outstanding.

These automations support administration and do not replace human judgement.

10. Who we share your personal data with

We do not sell your personal data.

We may share personal data with trusted third-party service providers where necessary to operate our business and deliver our products and services.


Current or potential providers may include:

  • Stripe;
  • ThriveCart;
  • ThriveLearn;
  • Jotform;
  • VBOUT;
  • Google Workspace;
  • Google Analytics;
  • Google Calendar;
  • Zoom or Google Meet;
  • Telegram, where used to provide access to selected Programme resources;
  • social media platforms;
  • approved AI-assisted note-taking, transcription and other AI tools;
  • legal, accounting and professional service providers.

This list may change as our systems evolve.

We aim to work with providers that offer appropriate data protection and security measures.

Telegram, where used, is intended as a convenient way to access selected Programme resources or communications and is not treated as B-MÓR's primary client-record system.

11. International data transfers

B-MÓR is based in the United Kingdom.

If you are outside the UK, your personal data may be processed in the UK.

Some of our service providers may process personal data outside the UK or European Economic Area. This may include the United States or other countries where our service providers operate.

Where personal data is transferred internationally, we will take steps designed to protect your data in line with applicable data protection laws.

This may include using:

  • adequacy regulations;
  • International Data Transfer Agreements;
  • UK Addendums to Standard Contractual Clauses;
  • Standard Contractual Clauses;
  • Data Privacy Framework participation where applicable;
  • contractual and technical safeguards.

You can contact us if you would like more information about international transfers relevant to your data.

12. Cookies and tracking technologies

Our websites and online platforms may use cookies and similar technologies to make them work properly and, where enabled, understand how they are being used.

These technologies may be provided by the platforms we use to host or operate our websites, including Gamma, and by services we choose to connect to them.

12.2 Analytics and marketing tracking

We may use tools such as Google Analytics, Meta Pixel, LinkedIn Insight Tag or similar technologies where appropriate.

These tools may collect information about website visits, page views, clicks, device information and approximate location.

Where required, we will ask for cookie consent through a cookie banner or cookie settings tool.

12.3 Managing cookies

You can manage cookies through:

  • your browser settings;
  • our cookie banner or cookie preference tool, where available;
  • third-party opt-out tools.

Blocking some cookies may affect website functionality, checkout, login or access to purchased resources.

13. Marketing communications

We may send marketing communications where:

  • you have opted in;
  • you have purchased from us and the law allows us to contact you about similar products or services;
  • you have otherwise requested or consented to receive content from us.

You can opt out of marketing communications at any time by:

  • clicking the unsubscribe link in any marketing email;

Opting out of marketing does not stop service-related communications, including:

  • receipts;
  • access emails;
  • Session reminders;
  • support replies;
  • important Programme updates;
  • legal or policy notices.

14. Testimonials, client language and case studies

We may invite you to provide feedback, a testimonial or a case study.

We will only use your identifiable testimonial, name, image, role, business name or story publicly where we have appropriate permission.

You may be asked to complete a separate testimonial consent form confirming:

  • what we may use;
  • where we may use it;
  • whether your name or identifying details can be included;
  • whether we can edit for grammar, clarity or length;
  • how to withdraw consent.

You can request removal of an identifiable testimonial by contacting:

We may use anonymised or aggregated feedback and non-identifiable client language internally to improve our products, services, delivery, offers and marketing.

15. Client confidentiality

We treat fit-call information, private Sessions, The Mirror, onboarding responses, journals, Reflections and relevant client communications as confidential client information.

We do not disclose your identifiable personal Programme information publicly without your permission.

Access is limited to those who reasonably need it to deliver, manage or support the Programme or operate B-MÓR.

Confidentiality may be limited where:

  • disclosure is required by law;
  • there is a serious risk of harm to you or another person;
  • disclosure is necessary to protect legal rights;
  • we need to respond to a complaint, refund request, chargeback or legal claim;
  • we need to seek legal, accounting, insurance or professional advice;
  • you give permission.

If you require a separate NDA for a specific business-sensitive engagement, contact:

16. Call and Session recordings, transcription and notes

Private Programme Sessions are not normally provided as client recordings.

You must not record a private Session without our prior written consent.

We may use an AI-assisted note-taking or transcription tool during a fit call or another permitted conversation to help create an accurate written record.

Where such a tool is used, we will tell you.

The use of an AI-assisted note-taking or transcription tool does not necessarily mean that an audio or video recording is retained. The exact information processed and retained depends on the technology being used.

Where B-MÓR intentionally records audio or video for a specific purpose, we will explain as appropriate:

  • why it is being recorded;
  • who may access it;
  • how it will be used;
  • how it will be stored;
  • how long it will be retained;
  • any choices or rights available to you.

17. Refunds, cancellations, complaints and disputes

If you request a statutory cancellation, voluntary withdrawal, Programme refund, complaint review, chargeback response or dispute resolution, we may review and use records reasonably relevant to that request.

This may include:

  • payment records;
  • checkout and Terms acceptance;
  • sales-call and fit information;
  • records of what was recommended or agreed;
  • The Mirror or other baseline information;
  • onboarding information;
  • journals and Reflections;
  • Final Reflections or Progress Reviews;
  • Session attendance;
  • Session preparation records;
  • relevant notes about interruptions or rescheduling;
  • emails and support messages;
  • access logs;
  • relevant Programme notes;
  • final Programme reviews.

For programmes with a refund commitment linked to participation or evidence of change, these records may be used to establish:

  • whether the required Programme process was materially completed;
  • whether there was sufficient baseline and progress information to assess the request;
  • what changes were reported during the Programme;
  • whether concerns were raised while the Programme was ongoing;
  • whether the contractual conditions relating to the refund request were met.

This information is used to assess the matter fairly, protect both parties and comply with our legal and contractual obligations.

18. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, tax, accounting, contractual, professional, operational, dispute and refund purposes.

The retention periods below are indicative and may be adjusted where legally necessary.


Where an AI-assisted note-taking or transcription provider is used, information may also be retained temporarily or for another defined period within that provider's systems.

We select and configure providers with the aim of limiting retention to what is reasonably necessary.

You may request deletion of your personal data.

We will comply where appropriate unless we need to retain certain information for legal, contractual, tax, accounting, dispute-resolution, legitimate business or safeguarding reasons.

19. Data security

We take reasonable steps to protect your personal data.

Security measures may include:

  • secure platforms;
  • encrypted data transmission where available;
  • password protection;
  • limited access on a need-to-know basis;
  • two-factor authentication where appropriate;
  • access controls;
  • secure payment processing;
  • staff confidentiality expectations;
  • secure storage of client records;
  • regular review of systems and access;
  • use of reputable third-party providers.

No method of online transmission or electronic storage is completely secure.

We cannot guarantee absolute security, but we take data protection seriously and work to protect your information.

You are responsible for:

  • keeping your login details confidential;
  • using strong passwords;
  • not sharing access to your account;
  • telling us promptly if you suspect unauthorised access.

20. Data breaches

If we become aware of a personal data breach, we will assess it and take appropriate action.

Where legally required, we will notify the Information Commissioner's Office and/or affected individuals.

If a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and explain what happened, what data was involved, what we are doing and any steps you may need to take.

21. Your privacy rights

21.1 Rights under UK GDPR

You may have the right to:

  • access the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • request deletion of your data;
  • restrict how we process your data;
  • object to processing based on legitimate interests;
  • request data portability;
  • withdraw consent where processing is based on consent;
  • object to direct marketing;
  • complain to the Information Commissioner's Office.

21.2 How to exercise your rights

To exercise your rights, email: support@b-mor.com

Subject line: Privacy Request

Please include:

  • your full name;
  • the email address associated with your account;
  • the right you want to exercise;
  • enough information for us to identify the relevant records.

We may ask for information to verify your identity before responding.

We aim to respond within one month where UK GDPR applies.

In complex cases, we may extend this period as permitted by law.

21.3 Complaints

You have the right to complain to the UK Information Commissioner's Office.

If you are outside the UK, you may also have rights to complain to your local data protection authority.

We ask that you contact us first so we have an opportunity to resolve your concern.

22. California and other international privacy rights

If you are located outside the UK, you may have additional rights under local law.

For example, some California residents may have rights to know, access, correct, delete or opt out of certain uses of personal information.

We do not sell personal information.

If you are based outside the UK and want to exercise a privacy right under your local law, contact: support@b-mor.com

We will respond where required by applicable law.

23. Children's privacy

Our services are intended for adults aged 18 and over.

We do not knowingly collect personal data from anyone under 18.

If we become aware that we have collected personal data from someone under 18, we will take reasonable steps to delete it.

If you believe a child has provided us with personal data, contact: support@b-mor.com

24. Third-party websites and links

Our websites, emails, resources or platforms may contain links to third-party websites or services.

We are not responsible for the privacy practices, content or security of third-party websites.

Before providing personal information to a third-party website, you should review its privacy policy.

25. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

We may update it to reflect:

  • changes in our services;
  • changes in our systems;
  • changes in our providers;
  • new products or programmes;
  • legal or regulatory changes;
  • changes in how we use AI-assisted tools;
  • changes to our client journey.

When we make material changes, we will update the Last Updated date and, where appropriate, notify you by email or through our website.

26. Where this Privacy Policy is available

This Privacy Policy may be linked or made available wherever we collect relevant personal data, including:

  • website footer;
  • contact and enquiry forms;
  • fit or sales-call booking page;
  • pre-call questions;
  • checkout page;
  • Terms & Conditions acceptance area;
  • The Mirror;
  • onboarding questionnaires;
  • Client Commitment sections;
  • journals and Reflections;
  • Final Reflections and Progress Reviews;
  • testimonial forms;
  • testimonial consent forms;
  • email footer;
  • cookie banner;
  • support forms.

27. Contact us

For privacy questions, rights requests, concerns or complaints, contact:

B-MÓR Ltd, Suite A
82 James Carter Road
Mildenhall
Bury St. Edmunds
England
IP28 7DE

Subject line: Privacy Request