Privacy Policy
Peace & Mind
Last updated: 03/11/2025
Peace & Mind is committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains:
-
What information we collect
-
How we use it
-
Your rights under UK GDPR and the Data Protection Act 2018
By using our website or submitting personal data, you agree to this policy.
Who we are
Peace & Mind
Registered in: United Kingdom
Email: meg@peaceandmind.co.uk
Website: www.peaceandmind.co.uk
We are the data controller of your personal information.
Data we collect
We may collect the following types of information when you:
-
Submit a contact form
-
Book a yoga class, workshop, or corporate service
-
Subscribe to our newsletter
-
Download resources or guides
-
Attend events (in-person or online)
Personal data collected may include:
Type of DataExamples
Identity DataName, job title (for corporate enquiries)
Contact DataEmail address, phone number, company name
Booking DataSession attendance, preferences, dates, payment confirmation
Website DataIP address, browser type, cookies, usage analytics
We do not collect sensitive medical data.
If you choose to disclose health information (e.g., injuries before yoga), this is optional and confidential.
How we use your information
We use your data to:
-
Respond to your enquiries
-
Deliver your booked classes, workshops, or corporate services
-
Send confirmation emails or updates regarding your booking
-
Send newsletters if you opt in
-
Improve our services and website
We will only use your personal data when legally permitted, including:
-
To fulfil a contract (e.g., your booking)
-
When you give consent (e.g., newsletter signup)
-
When we have a legitimate business interest (e.g., analytics or feedback surveys)
Payments & third-party services
Payments may be processed through third-party providers (e.g., Wix Payments, Stripe, PayPal).
We do not store your payment card information.
These providers operate under their own secure, GDPR-compliant privacy policies.
Sharing your data
We do not sell or share your personal data for marketing.
We may share data only with:
-
Service providers needed to run our business (e.g., payment processors, email platforms)
-
Legal authorities if required by law
All third parties are required to keep your data secure.
Data retention
We retain personal data only as long as necessary:
Type of Data > Retention Period
Contact / enquiry data > Up to 12 months
Booking history > Up to 7 years (legal requirement for accounting)
Newsletter subscription > Until you opt out
You can unsubscribe at any time.
Your rights
Under UK GDPR, you have the right to:
-
Access your personal data
-
Correct inaccurate data
-
Request deletion ("right to be forgotten")
-
Withdraw consent at any time (e.g., unsubscribe from emails)
-
Object to processing
To exercise your rights, email:
We will respond within 30 days.
Data security
We take reasonable measures to protect your data, including encrypted systems, password-protected accounts, and secure platforms.
However, no internet transmission is 100% secure.
Updates to this policy
We may update this Privacy Policy occasionally. Updates will be posted on this page with a new revision date.
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: