PRIVACY POLICY
The Mind-Body Bloom (a trading name of Stephanie Bowen) ("we", "us", or "our") is committed to respecting your privacy and to complying with applicable data protection and privacy laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
You can visit our website without providing any personally identifiable information about yourself. Please note, however, that we may use cookies and similar technologies to collect certain non-personal information about your browsing activity (please see our Cookie Policy for further details).
If you submit personal information to us — for example, by enquiring about services, purchasing coaching, registering for an event, or completing a contact form — we will use that information only for the purposes for which it was provided and in accordance with this Privacy Policy.
This Privacy Policy explains how The Mind-Body Bloom collects, uses, stores and protects personal data when you visit our website or use our coaching services.
We encourage you to read this policy carefully so that you understand how your personal information is handled and the rights you have in relation to it.
Personal Information We Collect
We collect personal information only where necessary to provide our services or where you choose to provide it to us.
This may include information collected when you:
• Enquire about coaching services
• Book or attend a sales or coaching call
• Purchase a coaching programme
• Complete a contact form
• Subscribe to receive updates or resources
• Communicate with us by email
The types of personal information we may collect include:
• Your name
• Email address
• Telephone number
• Billing address
• Payment information (processed securely via Stripe — we do not store full card details)
• Information you voluntarily share about your health, wellbeing, stress patterns, beliefs or personal circumstances
Where relevant to coaching services, we may process information relating to your health or emotional wellbeing. This is considered “special category data” under UK GDPR and is processed only with your explicit consent and for the purpose of delivering coaching services.
We collect and use personal information only for the specific purposes for which it was provided and in accordance with this Privacy Policy.
Non-Personal Information
We may collect certain non-personal information automatically when you visit our website, including:
• Pages viewed
• Time spent on pages
• Device type
• Browser type
• General location data (e.g. country)
This information is collected via cookies and similar technologies and is used to:
• Improve website performance
• Understand user behaviour
• Enhance user experience
For further information, please see our Cookie Policy.
How We Use Your Information
We use your personal information for the following purposes:
• To deliver coaching services
• To process payments
• To manage client relationships
• To respond to enquiries
• To provide requested resources or information
• To maintain records required for business and legal purposes
• To comply with legal or regulatory obligations
Where you have opted in to receive marketing communications, we may contact you with updates, resources, events or offers relating to our services.
Marketing communications are sent only where you have provided consent or where otherwise permitted by law.
You may withdraw your consent or unsubscribe from marketing communications at any time by:
• Clicking the unsubscribe link in any email, or
• Contacting us at: info@stephaniebowen.co.uk
We do not sell, rent or trade your personal information to third parties.
Lawful Basis for Processing
Under UK data protection law, we process personal data on the following lawful bases:
• Performance of a contract – where processing is necessary to deliver coaching services you have purchased or requested.
• Legitimate interests – where processing is necessary to operate, manage and improve our business in a way that does not override your rights and freedoms.
• Consent – where you have given clear consent (for example, to receive marketing communications or where you voluntarily provide health-related information as part of coaching services).
• Legal obligation – where processing is necessary to comply with applicable legal or regulatory requirements.
Where we process special category data (such as health information), we rely on your explicit consent and the provision of coaching services requested by you.
When We Share Your Information
We do not sell, rent or trade your personal information to third parties.
We may share your personal information only where necessary to deliver our services or to comply with legal obligations.
This may include sharing data with trusted third-party service providers who support the operation of our business, including:
• Payment processors (e.g. Stripe)
• Video conferencing platforms (e.g. Zoom)
• Email and cloud storage providers
• Website hosting providers
• Professional advisers (such as accountants or insurers, where required)
These service providers process data on our behalf and are required to handle your information securely and in accordance with applicable data protection laws.
We may also disclose your information:
• Where required by law or regulation
• To comply with a court order or legal obligation
• To protect our legal rights
• Where there is a serious risk of harm to you or others
If The Mind-Body Bloom is sold, transferred, or reorganised in the future, personal data may be transferred as part of that business transition, subject to appropriate data protection safeguards.
Social Media and Public Platforms
If you interact with us on social media platforms (such as Instagram, Facebook, or LinkedIn), your information is processed in accordance with the privacy policies of those platforms.
Any comments or content you post on public pages or social media channels may be visible to others.
We do not control how third-party platforms use your information and recommend reviewing their respective privacy policies.
How Long We Keep Your Information
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.
In general:
• Client records are retained for as long as necessary to deliver services and to meet legal, tax or insurance obligations.
• Enquiry information is retained for a reasonable period unless you request deletion.
• Marketing data is retained until you unsubscribe or withdraw consent.
You may request deletion of your personal data at any time, subject to any legal or contractual obligations requiring retention.
We do not retain personal data indefinitely and periodically review stored information to ensure it remains necessary and proportionate.
Access to Your Information
You have the right to request access to the personal information we hold about you.
You may request:
• A copy of your personal data
• Correction of inaccurate information
• Deletion of your data (where legally permissible)
• Restriction of processing
• Objection to certain types of processing
• Data portability (where applicable)
To make a request, please contact us at:
Email: info@stephaniebowen.co.uk
We may need to verify your identity before responding to your request.
We aim to respond to all legitimate requests within one month, in accordance with UK GDPR.
If you are not satisfied with how your data is handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.
Information Security
We take appropriate technical and organisational measures to protect your personal information from unauthorised access, misuse, alteration or loss.
These measures include:
• Secure password-protected systems
• Two-factor authentication where available
• Secure cloud storage providers
• Encrypted payment processing via Stripe
• Secure video conferencing platforms (such as Zoom)
While we take reasonable steps to protect your data, no transmission over the internet can be guaranteed to be completely secure. You provide information at your own risk.
International Data Transfers
Some of the third-party service providers we use (such as Stripe, Zoom or cloud storage providers) may process data outside the United Kingdom.
Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as the use of standard contractual clauses or reliance on adequacy decisions.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices.
The most current version will always be available on our website.
Communication Monitoring and Recording
We may record coaching sessions and sales calls for training, quality assurance and professional development purposes, as outlined in our Coaching Agreement.
Any recordings are stored securely and are not shared without consent except as described in this Privacy Policy.