Privacy policy
We are dedicated to safeguarding your privacy and want to share our practices for handling your personal information. This policy relates to your use of our website www.serenitywithsarah.co.uk and our services. It outlines who we are, how we collect, use, store, and share your data, your rights regarding your information, and how to contact us or relevant authorities if you have any concerns. Please read it carefully.
Who we are
When we use “we”, “our” or “us” in this policy, we mean Serenity with Sarah as data controller.
We collect, use and are responsible for certain personal information about you. When we do so we are regulated under the UK General Data Protection Regulation and responsible as ‘controller’ for that personal information.
What information we collect, use and why
We collect or use the following information to provide our services or when you access our website.
• Names and contact details
• Payment details (including card or bank information for transfers and direct debits)
• Health information (including health conditions)
• Website user information (including user journeys and cookie tracking)
We collect or use the following information for marketing purposes:
• Names and contact details
• Marketing preferences
• Records of consent, where appropriate
We collect this personal information from you either directly, such as when you fill in forms on our website or contact us, subscribe to our services or indirectly, such as your browsing activity whilst on our website.
If you are a patient under the care of the NHS and have provided explicit consent, the NHS may share your contact information with us. This allows us to reach out to you regarding participation in our chair yoga classes and related services. We handle this information in strict accordance with our data protection policies and only use it for the purposes outlined in this notice. If you have any concerns about this process, please contact us using the details provided below.
Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
This website is not intended for use by children and we do not knowingly collect or use personal information relating to children.
Our legal basis for processing your personal information
We are required by law to have a specific reason for collecting and using your personal information. Our lawful bases for collecting or using personal information to provide services are:
· Consent
· Contract
Our lawful basis for collecting or using personal information for marketing purposes is
· Consent
Who we share your personal information with
To help you participate in our online classes, we may need to share some of your information with Zoom. You can find out more about how Zoom handles your information by checking their privacy policy. Remember, you have control over your own privacy settings on Zoom, like muting your audio or turning off your video
Where we store your personal data
We take the security of your data very seriously and follow best practice on data security.
The collection of your personal information will take place on Microsoft Forms. During data collection, the data may be stored on servers residing outside the UK. Microsoft adheres to the highest possible industrial standards for information security: https://privacy.microsoft.com/en-gb/privacystatement
Your data will be downloaded from Microsoft Forms and stored securely by us within the European Economic Area on Microsoft Office 365 business services. Microsoft will have access to your personal information for the purposes of providing the business services to us.
For more information about how Microsoft may process your personal information please see the information in the Microsoft Trust Centre: https://www.microsoft.com/en-us/trust-center/privacy
There may be occasions where Microsoft transfer your personal information outside the European Economic Area (EEA), as set out in the privacy statements linked to above.
How long we keep your personal data
We keep your information for as long as necessary to fulfil the purposes outlined in this privacy notice unless otherwise required by law.
When we have no ongoing need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
Cookies
We use Cookies to enhance and improve our website and services, including remembering your preferences and running analytics. Third parties may also use Cookies for tailored services and advertising. Most browsers accept Cookies by default, but you can manage them via your browser settings. Note that blocking Cookies can affect your experience and some features may not work properly. For more details on our Cookie usage, see https://www.shopify.com/legal/cookies. We use Zoom as our platform provider for online classes. Zoom may use cookies and similar tracking technologies during your participation in our online classes. For more information on how Zoom uses these technologies, please refer to Zoom’s cookie policy.
Your rights
Under data protection law, you have rights including:
- Your right of access - You have the right to ask us for copies of your personal data
- Your right to rectification - You have the right to ask us to rectify personal data you think is inaccurate or incomplete.
- Your right to erasure - You have the right to ask us to erase your personal data in certain circumstances.
- Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances.
- Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances
- Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent.
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.
Contact us
We would be happy to answer any questions, comments, requests or concerns you may have about the way we use your personal information. If you wish to contact us, please email sarah@serenitywithsarah.co.uk.
You also have the right to lodge a complaint to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113.
Changes to this policy
Any changes we may make to this policy in the future will be posted on this page. Please check back frequently to see any updates or changes. The most recent update was made in March 2025.