Privacy Policy – The Oya Energy

Effective Date: February 2025

At The Oya Energy (accessible from http://www.theoyaenergy.co.uk), your privacy is of the utmost importance to us. This Privacy Policy outlines how we collect, use, and safeguard your personal data, including sensitive information such as medical history, in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

Who We Are

The Oya Energy is a breathwork practice operated by Stefanie Helene, based in Colchester, UK. For the purposes of data protection law, Stefanie is the Data Controller of your personal information.

What Information We Collect

We may collect and process the following information:

• Full name, email address, and contact information

• Medical history and relevant health information (submitted via booking form)

• Session notes and feedback from in-person or online breathwork sessions

• Information you provide when signing up for newsletters or downloading resources (e.g., name and email address)

• Technical data such as browser type, IP address, and pages visited (via cookies)

Why We Collect Your Data

We collect and process your personal data in order to:

• Provide you with safe, tailored breathwork services

• Assess suitability for sessions based on your medical history

• Maintain records for legal, regulatory, and insurance purposes

• Respond to your enquiries and communicate effectively with you

• Send updates and marketing communications if you have opted in

Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

• Consent – You have given clear consent for us to process your personal data.

• Contractual Obligation – Processing is necessary for us to fulfil our service agreement with you.

• Legitimate Interest – To keep records, respond to enquiries, and improve services.

• Legal Obligation – To retain certain records to meet insurance and regulatory requirements.

We will only collect medical data with your explicit consent, and it will be processed solely for providing appropriate breathwork services.

How We Store and Protect Your Data

• Medical history and session notes are stored securely, either in encrypted digital files or locked physical files.

• Emails containing booking form responses are reviewed, stored securely, and then removed from the inbox.

• Access to your information is limited to Stefanie only, and appropriate technical measures (e.g., passwords, encryption, two-factor authentication) are in place.

• We never share your personal data with third parties unless required by law.

Data Retention

In line with insurance requirements and professional guidelines, we retain session records and client data for 7 years from the date of your last session. In the case of minors, records are retained until the individual turns 18 and for an additional 7 years thereafter.

After this period, your information will be securely deleted or destroyed.

Your Data Protection Rights

You have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate information

• Request erasure of your data (unless required to keep it for legal reasons)

• Withdraw your consent at any time

• Restrict or object to the processing of your data

• Request a copy of your data in a portable format

To exercise any of these rights, please contact us at stefanie@theoyaenergy.co.uk.

Children’s Privacy

We do not knowingly collect data from children under the age of 13 via the website. If you believe a child has submitted personal information without parental consent, please contact us and we will delete the data.

Cookies

We use cookies to improve your website experience and track analytics. These do not collect identifiable personal information. You may disable cookies in your browser settings.

Third-Party Services

We may use third-party services (e.g., Squarespace, Google Analytics) to host our site or track usage. These services may collect anonymous technical data. We do not share your personal information with advertisers or unauthorised third parties.

Offline Data

This Privacy Policy applies to both data collected through our website and offline data, such as paper consent forms, medical history, and session notes.

Contact

If you have questions about this policy or your data, contact Stefanie
Email: stefanie@theoyaenergy.co.uk
Website: www.theoyaenergy.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data rights have been violated.

Consent

By using this site and/or submitting your information via booking forms, you consent to the collection and use of your data as described in this Privacy Policy.