This website is brought to you by Inhere Ltd. We take the privacy of our customers and users very seriously. We ask that you read this Privacy Policy (‘the Policy’) carefully as it contains important information about how we will use your personal data.

For the purposes of data protection laws, Inhere Ltd (‘we’ or ‘us’) is the ‘data controller’ (ie the company who is responsible for, and controls the processing of, your personal data).

Personal data we may collect about you

We will obtain personal data about you (such as your name, address, email address, phone number and payment details) whenever you place an order for a meditation session from our site, or if you create an account on our site, or you request further information about Inhere.

We may monitor your use of this website through the use of cookies and similar tracking devices. For example, we may monitor how many times you visit, which pages you go to, traffic data, location data and the originating domain name of a user’s internet service provider. This information helps us to build a profile of our users. Some of this data will be aggregated or statistical, which means that we will not be able to identify you individually. For further information on our use of cookies, please see the Use of Cookies section below.

How we use your personal data

When creating an account or (if we permit you to register as a guest) book a meditation session, you will be asked whether you agree to this Privacy Policy, and by indicating that you agree you consent to our using your information for the following purposes:

• to help us identify you and any accounts you hold with us;
• administration;
• research, statistical analysis and behavioural analysis (this will be undertaken on an aggregated anonymised basis so that no personal data will be comprised in our analysis findings);
• analysing your purchasing preferences in order to tailor our communications with you;
• marketing—see ‘Marketing and opting out’, below;
• fraud prevention and detection;
• billing and order fulfilment;
• customising this website and its content to your particular preferences;
• we may on occasion record a meditation session (but will seek your consent to this in advance);
• to notify you of any changes to this website or to our services that may affect you; and
• improving our services.

Marketing and opting out

If you have given permission, we may contact you by email about products that may be of interest to you. If you prefer not to receive any direct marketing communications from us, you can opt out at any time. See further ‘Your rights’, below.

Disclosure of your personal data

We may disclose your personal data to:

• other companies within our group;
• our booking services partner, Mindbody (Mindbody’s privacy policy is here – https://www.mindbodyonline.com/privacy-policy);
• the operator of the venue in which a meditation session is held;
• our payment processors.

How long your personal information will be kept

We will hold data about you relating to your booking a meditation for as long we need to in order to use it for the purposes listed above in the “How we Use your Personal Information” section, or to comply with our legal obligations. For example, we are required to retain certain financial information for a certain period to comply with UK tax and accounting regulations.

If you have opted-in to receive email information from us, we will retain your email address for a period of 18 months from our last having heard from you.

Reasons we can collect and use your personal information

We rely on the following as the lawful bases on which we collect and use your personal data:

Where we use it to send you information about Inhere by email, we do so with your consent, which you have the option to withdraw at any time, by clicking on the ‘unsubscribe’ link in our emails.

Where we use it to facilitate our providing you with a meditation session, we do so on the legal basis that it is necessary for the purposes of our honouring an agreement with you.

In other cases, we process data on the basis that it is in our legitimate interest to do so. Our legitimate interests are the provision of a service and operation of a business which we consider to be of benefit to our customers.

Keeping your data secure

We will use technical and organisational measures to safeguard your personal data, for example:

• access to your account is controlled by a password and username that are unique to you;
• we store your personal data on secure servers; and
• payment details are encrypted using SSL technology.

While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet.

If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses

Transfer of your information out of the EEA

We may transfer your personal information to the following which are located outside the European Economic Area (EEA) as follows:

• to our email service provider, Mailchimp, which is in the USA. We do this to help us send out our email information to people who have consented to receive it.
• to our booking and communications platform, Mindbody, which is also in the USA. We do this to facilitate bookings and related communications with you.

The USA does not have the same data protection laws as the United Kingdom and EEA. Whilst the European Commission has not given a formal decision that the USA provides an adequate level of data protection similar to those which apply in the United Kingdom and EEA, any transfer of your personal information will be subject to the EU-US Privacy Shield certifications of Mailchimp and Mindbody.

MailChimp’s EU-US Privacy Shield certification is here – https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active .

Mindbody’s is here – https://www.privacyshield.gov/participant?id=a2zt0000000TOHGAA4&status=Active. If you would like further information please contact us (see ‘How to contact us’ below). We will not otherwise transfer your personal data outside of the United Kingdom and EEA.

Monitoring

We may monitor and record communications with you (such as telephone conversations and emails) for the purpose of quality assurance, training, fraud prevention and compliance.