Privacy Policy
1. Who we are
Float Studio ("we", "us", "our") offers sound bath sessions in London, run by Juliet Cohen. We are the "controller" of the personal data described in this policy, which means we decide how and why it is used.
Business name: Float Studio
Email: juliet@floatstudio.co.uk
This policy explains what personal information we collect, how we use it, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
2. What information we collect
When you book or enquire. If you email us to book a session or ask a question, we collect your name, email address, any phone number you give us, the date and size of your booking, and the content of your messages.
Health and wellbeing information. Sound baths are gentle, but you may choose to tell us about things that affect your session, such as pregnancy, injuries, anxiety, epilepsy, hearing sensitivity, or allergies (for example to cacao). This is "special category" data, so we only collect what you choose to share and need to keep you safe and comfortable.
Payments. We keep a record of what you paid and when. We do not store full card details ourselves.
Website use. When you visit our website, we may collect technical information such as your IP address, browser type, device, and the pages you view. [Describe any analytics or cookies actually used, or state that none are.]
Social media. If you message or tag us on Instagram (@_floatstudio), we may see your username and the content of your messages. Instagram is run by Meta and has its own privacy policy.
3. How and why we use your information
| What we do | Information used | Our lawful basis |
|---|---|---|
| Arrange, run and confirm your session | Contact details, booking details | Contract (taking steps at your request before and during a booking) |
| Keep you safe and comfortable during a session | Health and wellbeing information you share | Your explicit consent |
| Take payment and keep financial records | Payment details, booking history | Contract; legal obligation (accounting and tax records) |
| Reply to your enquiries | Contact details, your message | Legitimate interests (responding to people who contact us) |
| Keep our website working and secure | Technical data | Legitimate interests |
| Improve our website through analytics | Cookie and usage data | Your consent |
If you give us consent, you can withdraw it at any time by emailing us or, for the newsletter, using the unsubscribe link. Withdrawing consent does not affect anything done before.
We do not sell your personal data, and we do not use it for automated decision-making or profiling.
4. Who we share your information with
We only share information where needed, with trusted providers who act on our instructions, such as:
our website host and website platform
our email provider
our bank
our accountant
We may also share information if the law requires it, or to protect someone's safety. We do not share your health information with anyone else unless you ask us to or there is a genuine safety concern.
5. How long we keep your information
| Information | How long we keep it |
|---|---|
| Booking and enquiry emails | 2 years after your last session |
| Health and wellbeing information | Deleted within 12 months of your last session, or sooner on request |
| Payment and accounting records | 6 years, to meet UK tax and accounting requirements |
| Website analytics data | 14 months |
6. Keeping your information secure
We use sensible measures to protect your data, including password-protected accounts, two-factor authentication, secure email, and limiting access to those who need it. No method of storage or transmission is completely secure, but we take care to reduce the risk. If a data breach is likely to put you at risk, we will tell you and the Information Commissioner's Office as the law requires.
7. Your rights
You have the right to:
be informed about how we use your data (this policy)
access the personal data we hold about you
correct anything that is inaccurate or incomplete
erase your data in certain circumstances
restrict how we use your data in certain circumstances
object to us using your data based on legitimate interests
data portability, to receive your data in a reusable format where applicable
withdraw consent at any time where we rely on it
To use any of these rights, email juliet@floatstudio.co.uk. We will normally respond within one month, and we do not charge a fee unless a request is clearly unfounded or excessive. We may need to confirm your identity first.
8. Cookies
Apart from strictly necessary cookies, we only set cookies if you agree using the cookie banner, and you can change your choice at any time. A full list is in our cookie table: [add name, purpose, provider, duration].
9. Children
Our sessions are suitable for people of all ages, but we book through adults. We do not knowingly collect personal data directly from children. If a child attends a session, we will ask the parent or guardian for any information we need.
10. Complaints
If you are unhappy with how we have handled your data, please contact us first at juliet@floatstudio.co.uk so we can try to put it right. We will acknowledge your complaint promptly and keep you updated on how we are dealing with it.
You also have the right to complain to the Information Commissioner's Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on our website with the date at the top. If we make significant changes, we will let you know where we reasonably can.
12. Contact us
Questions about this policy or your data? Email juliet@floatstudio.co.uk.