Harewood Holistics LTD – Privacy Policy

Last updated: June 2026

Harewood Holistics LTD (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services, website, booking systems, or attend any of our classes, treatments, workshops, retreats, memberships, or training programmes.

1. Who We Are

Harewood Holistics LTD is the data controller responsible for your personal data.

Contact details for privacy enquiries are provided on our website.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity and Contact Data

• Name

• Email address

• Telephone number

• Address (where required for invoicing or bookings)

Service and Booking Data

• Class, treatment, workshop, retreat, or training bookings

• Attendance records

• Purchase and membership history

• Scheduling and booking preferences

Health Data (Special Category Data)

• Injury or medical information

• Pregnancy status

• Allergies or relevant health conditions

• Other health disclosures provided by you

This data is only collected where necessary to ensure safe participation in our services.

Payment Information

Payments are processed securely by third-party payment providers. We do not store full payment card details.

Marketing Data (if applicable)

• Email marketing preferences

• Consent status for communications

3. How We Collect Your Data

We collect personal data when you:

• Make a booking via our booking system (Momence)

• Complete forms on our website

• Communicate with us by email or phone

• Register in person for classes or services

• Apply for teacher training programmes

4. How We Use Your Data

We use your personal data to:

• Manage bookings and deliver services

• Ensure safe participation in classes and treatments

• Process payments, memberships, and subscriptions

• Communicate important booking or service updates

• Administer teacher training programmes

• Meet legal, tax, and insurance obligations

• Send marketing communications (only where consent has been given)

5. Lawful Basis for Processing

We process your data under the following lawful bases:

• Contract: to deliver services you have booked

• Legal obligation: for accounting, tax, and regulatory compliance

• Legitimate interests: to operate and improve our services

• Consent: for marketing communications and processing health data

Where we process health information, we rely on your explicit consent, provided at the time of booking or registration.

6. Health Information

Health data is collected solely to:

• Ensure safe participation in services

• Identify contraindications or necessary adjustments

• Support appropriate treatment or class delivery

Health information is:

• Only accessible to relevant practitioners

• Treated as strictly confidential

• Not shared with third parties except where legally required

7. Data Sharing

We only share personal data where necessary to deliver services, including:

• Booking system providers (e.g. Momence)

• Payment processors

• Email communication platforms (if used)

• Professional advisors where required by law

We do not sell or rent your personal data.

8. Data Storage & Security

We take appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access.

Your data is stored securely and access is limited to authorised personnel only.

9. Data Retention

We retain personal data only for as long as necessary:

• Client and booking records: retained for legal and insurance purposes

• Health data: retained only while you remain an active client, unless legally required otherwise

• Marketing data: retained until consent is withdrawn or you unsubscribe

10. Marketing Communications

• We only send marketing communications where you have opted in

• You may withdraw consent at any time using unsubscribe links or by contacting us

11. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion of your data (where applicable)

• Withdraw consent at any time

• Object to processing in certain circumstances

• Request data portability

• Lodge a complaint with the Information Commissioner’s Office (ICO)

12. Cookies

Our website may use cookies to:

• Improve functionality

• Analyse website performance

• Enhance user experience

You can manage cookie settings in your browser.

13. Third-Party Websites

We are not responsible for the privacy practices of third-party websites linked from our website or communications.

14. Teacher Training Data

For teacher training programmes, we may process additional data including:

• Application details

• Attendance records

• Assessment and certification records

This data is used solely for course administration and certification purposes.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be published on our website with an updated revision date.

16. Contact

Privacy-related enquiries should be directed to the contact details provided on our website.

17. Relationship to Terms & Conditions

This Privacy Policy operates separately from our Terms & Conditions.

• Our Terms & Conditions govern bookings, payments, cancellations, liability, and participation rules.

• This Privacy Policy governs how we collect and process personal data.

• Where both apply, they are intended to complement each other and not conflict.

18. Agreement

By using our services or booking through our systems, you acknowledge that you have read and understood this Privacy Policy.