Important: This Privacy Policy is provided as a general template for Sense and Soul Space. It does not constitute legal advice. You should ask a qualified legal professional to review and adapt this document before publishing or relying on it.

Privacy Policy

Last updated: [Insert date]

1. Who We Are

“Sense and Soul Space” (“we”, “us”, “our”) is a wellness and soul space business based in Ireland. We offer services such as classes, workshops, events, and one-to-one sessions aimed at supporting wellbeing and personal growth.

For the purposes of applicable data protection laws, including the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Irish data protection law, we are the “data controller” of the personal data we collect and process about you.

Registered/business address: [Insert address in Ireland]
Website: https://[insert-domain]
Email: [insert-contact-email]
Telephone: [Insert telephone number]

2. What Data We Collect

The types of personal data we may collect about you include:

• Contact details: Name, email address, phone number, postal address.
• Booking and purchase information: Details of the services, classes, events, or products you book or purchase from us, payment status (but not full card details), and related correspondence.
• Account information: Login details (such as username), if you create an account on our website.
• Communications: Emails, messages sent through our contact form or social media, feedback, testimonials, and survey responses.
• Marketing preferences: Your choices about whether and how you wish to receive marketing communications from us.
• Wellness or session information (if applicable): Any information you choose to share with us before or during a session, such as goals, themes, or relevant background. We will only request sensitive information (for example, health-related information) where it is strictly necessary and with your explicit consent.
• Technical and usage data: IP address, browser type and version, device identifiers, time zone setting, approximate location, and information about how you use our website (pages visited, time on site, clicks), which may be collected via cookies and similar technologies.

We generally collect this data directly from you (for example, when you fill in a form, make a booking, or contact us). We may also receive some technical data automatically through cookies and analytics tools when you visit our website.

3. How We Use Your Data

We use your personal data for the following purposes, and on the following legal bases:

• To provide our services and manage bookings – to process your bookings, manage your attendance, deliver classes or sessions, handle payments, and communicate with you about your bookings.
  Legal basis: Performance of a contract and steps taken at your request before entering into a contract.
• To respond to enquiries and provide customer support – to reply when you contact us by email, phone, contact form, or social media.
  Legal basis: Legitimate interests (to operate our business and respond to requests) and/or performance of a contract.
• For marketing and newsletters – to send you updates about our offerings, events, or news that we think may interest you.
  Legal basis: Your consent (where required by law) or our legitimate interests (to grow and promote our business), subject to your right to opt out at any time.
• To improve our services and website – to analyse how our website is used, understand trends, and make improvements to our content, services, and user experience.
  Legal basis: Legitimate interests (to develop and improve our services and website).
• To comply with legal obligations – for example, to maintain financial records, respond to lawful requests from public authorities, or comply with tax and accounting requirements.
  Legal basis: Compliance with legal obligations.
• To protect our rights and security – to prevent fraud, misuse of our services, or security incidents, and to establish or defend legal claims.
  Legal basis: Legitimate interests and, where applicable, the establishment, exercise, or defence of legal claims.

4. Data Storage and Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures may include secure systems, access controls, encryption where appropriate, and staff training on data protection.

Your personal data is generally stored within the European Economic Area (EEA). If we use service providers or tools that transfer data outside the EEA, we will ensure that appropriate safeguards are in place as required by GDPR (for example, the use of standard contractual clauses or transfers to countries deemed to provide an adequate level of protection).

We keep your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. After this period, we will securely delete or anonymise your data.

5. Your Rights (GDPR)

Under GDPR and Irish data protection law, you have certain rights in relation to your personal data. These may include:

• Right of access: To request confirmation of whether we hold personal data about you and to receive a copy of that data.
• Right to rectification: To ask us to correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: To request that we delete your personal data in certain circumstances (also known as the “right to be forgotten”).
• Right to restriction of processing: To ask us to restrict the processing of your personal data in certain situations.
• Right to data portability: To request a copy of your personal data in a structured, commonly used, and machine-readable format and to have it transferred to another organisation, where technically feasible.
• Right to object: To object to our processing of your personal data where we are relying on legitimate interests, including profiling based on those interests, and to object at any time to the use of your data for direct marketing.
• Right to withdraw consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You can exercise your rights by contacting us using the details in the “Contact Information” section below. We may need to verify your identity before responding to your request. You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) if you have concerns about how we handle your personal data. For more information, please visit https://www.dataprotection.ie.

6. Cookies

Our website may use cookies and similar technologies (such as pixels or local storage) to improve your experience, understand how our website is used, and support our marketing efforts.

Cookies are small text files stored on your device when you visit a website. They can help the website remember your actions and preferences over a period of time. Some cookies are essential for the website to function properly, while others are optional and used for analytics or marketing.

Where required by law, we will ask for your consent before placing non-essential cookies on your device. You can manage or disable cookies through your browser settings or by using the cookie controls on our website (if available). Please note that disabling certain cookies may affect the functionality or performance of our website.

For more details, please refer to our separate Cookie Policy (if available) or contact us using the details below.

7. Third Party Links

Our website and communications may contain links to third party websites, social media platforms, or services (for example, booking systems, payment providers, or event platforms). These websites and services are not operated or controlled by us.

We are not responsible for the privacy practices or content of third party websites or services. If you follow a link to any of these websites, please note that they have their own privacy policies and terms. We encourage you to review those policies before providing any personal data to them.

8. Sharing Your Data

We do not sell your personal data. We may share your data with trusted third parties where necessary for the purposes described in this Privacy Policy, including:

• Service providers: Such as website hosting, email services, booking platforms, payment processors, IT support, and analytics providers.
• Professional advisers: Such as accountants, legal advisers, or insurers, where necessary for legitimate business purposes.
• Public authorities and regulators: Where required to comply with legal or regulatory obligations, or to protect our rights or the rights of others.

When we share data with third party service providers, we require them to respect the security of your personal data and to treat it in accordance with data protection law. They may only process your personal data on our instructions and for specified purposes.

9. Contact Information

If you have any questions about this Privacy Policy, our use of your personal data, or if you wish to exercise your data protection rights, you can contact us at:

Sense and Soul Space
Email: senseandsoulspace@outlook.com
Telephone: 0870060641

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our services, legal requirements, or how we handle personal data. Any updates will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically to stay informed about how we protect your information.