Privacy Policy

1. Data Controller

Holisticstrength, operating at Carmelite Priory, Chilswell Ln, Boars Hill, Cumnor, Oxford OX1 5HB, United Kingdom, acts as the data controller for personal information collected through holisticstrength.world and associated services. Contact: question@holisticstrength.world or +44 1865 604003.

2. Information We Collect

We may collect the following categories of personal data:

• Identity data: name and title
• Contact data: email address, telephone number, postal address
• Communication data: messages submitted via our contact form
• Technical data: IP address, browser type, device information, and pages visited
• Preference data: cookie consent choices stored in your browser

3. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process personal data on the following grounds:

• Consent: when you submit a contact form or accept non-essential cookies
• Contractual necessity: when processing is required to deliver programmes you have enrolled in
• Legitimate interests: to improve our website, respond to enquiries, and maintain security
• Legal obligation: when required by applicable law or regulatory authority

4. How We Use Your Data

Personal data is used to respond to enquiries, administer programme enrolments, send relevant communications, analyse website usage where consent is given, and comply with legal requirements. We do not sell personal data to third parties.

5. Data Retention

Contact form submissions are retained for up to twenty-four months unless a longer period is required for ongoing correspondence or legal purposes. Programme-related records are kept for seven years following the conclusion of services, in line with UK record-keeping practice. Technical logs are retained for ninety days. Cookie preferences persist until you clear your browser storage or withdraw consent.

6. Data Security

We implement appropriate technical and organisational measures including encrypted connections (HTTPS), access controls, staff training, and regular review of data handling procedures. While no system is entirely immune to risk, we take reasonable steps to protect your information.

7. International Transfers

Where data is transferred outside the United Kingdom or European Economic Area, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data where legally applicable
• Restrict or object to certain processing activities
• Data portability for information provided with consent
• Withdraw consent at any time without affecting prior lawful processing
• Lodge a complaint with the Information Commissioner's Office (ico.org.uk)

To exercise any of these rights, contact question@holisticstrength.world. We will respond within thirty days.

9. Third-Party Services

Our website may embed third-party content such as map services. These providers may collect data according to their own privacy policies. Analytics and marketing tools are activated only with your explicit cookie consent.

10. Data Protection Act 2018

This policy is issued in compliance with the UK GDPR as retained in UK law and the Data Protection Act 2018. We process personal data lawfully, fairly, and transparently, and maintain records of processing activities as required.

11. Privacy and Electronic Communications (PECR)

Non-essential cookies and electronic marketing communications require your consent under PECR. You may withdraw consent for cookies via our banner or settings panel. To opt out of marketing emails, use the unsubscribe link in any message or contact us directly.

12. Children's Data

Our services are intended for adults aged eighteen and over. We do not knowingly collect personal data from children. If you believe we have received data from a minor, please contact us and we shall delete it promptly.

13. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

14. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be indicated by revising the date above. Continued use of our website after changes constitutes acknowledgement of the updated policy.