At Tranquil Waves, your privacy is deeply important to us. This policy explains how we collect, use, protect, and look after your personal information when you visit our website or book a session with us.

For the purposes of data protection laws, Tranquil Waves ("we", "us") is the data controller responsible for your personal data.

What We Collect

We may collect the following information when you use our website or book a session:

• Name

• Email address

• Phone number

• Booking and appointment details

How and Why We Use Your Information

Under UK data protection laws, we must have a "lawful basis" to use your data. We use your information to:

• Manage and confirm your bookings: Necessary for the performance of our contract with you.

• Communicate about your sessions or respond to inquiries: Necessary for our contract or our legitimate business interests.

• Improve our services and website experience: Based on our legitimate business interests.

• Send occasional marketing updates: Only if you have explicitly opted in (based on your consent, which you can withdraw at any time).

• Communicate via messaging platforms (such as WhatsApp): Only if you choose to initiate contact with us this way.

How Your Data is Stored & Shared

Your data is stored securely using trusted third-party platforms, including our website host (SquareSpace), our booking and secure payment providers, and communication tools. We do not sell or rent your personal data to third parties.

Some of our trusted providers may process or store data outside the UK/EEA. Where this happens, we ensure they comply with strict legal safeguards and data protection standards.

Messaging Services (e.g., WhatsApp)

If you choose to contact us via messaging services such as WhatsApp, your communication will be processed by that platform. This means your data will also be handled in accordance with their respective privacy policies.

Data Retention

We only keep your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

Your Legal Rights

Under the UK GDPR, you have the right to:

• Request access to the personal data we hold about you.

• Request correction or deletion of your personal data.

• Withdraw your consent for marketing at any time.

• Object to or restrict the processing of your data.

To exercise any of these rights, please contact us at: hello@tranquilwaves.co.uk.

If you are unsatisfied with our response, you have the right to make a complaint at any time to the Information Commissioner's Office (ICO) at www.ico.org.uk. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.

Updates

We may update this policy from time to time to reflect changes in our practices or legal obligations. Please check back regularly for updates.