PRIVACY POLICY

Last updated: 15 September 2026

Privacy Policy - the basics

Why we use it, and our lawful basis

We use your information to provide the sessions, events and products you have booked, which we do on the basis of our contract with you. We use what you tell us about your health to keep you safe during sessions, on the basis of your consent and of substantial public interest. We use your details to take payment and keep accounting records, which we are legally obliged to do. We send marketing emails on the basis of your consent, or of the soft opt-in that applies where you are already a customer. And we use information about how the website is used to improve it, and your contact details to answer enquiries, both on the basis of our legitimate interests in running the business well.

A legal disclaimer

Michelle Murray, a sole trader, trading as Michelle Murray and The Zen Den, of Unit 13b Springfield Mills, Bagley Lane, Farsley, Leeds LS28 5LY, is the data controller for the personal information described here. You can contact us at hello@michellemurray.co.uk or 07715 547510.

What we collect

When you book or buy: your name, email address, phone number, billing and delivery address, and details of what you booked.

When you tell us about your health: where you disclose a health condition, pregnancy, medication or similar so that we can keep you safe. This is special category data and we treat it with particular care — see below.

When you join our mailing list: your name and email address, and information about how you interact with our emails.

When you use this website: technical information including IP address, browser, device and pages visited, collected through cookies and similar technologies.

When you contact us: whatever you choose to tell us.

We do not take or store card details. Payments are processed by Stripe, who handle card data directly under their own privacy policy.

What to include in the Privacy Policy

Health information

Information you give us about your health is only ever used to decide whether a session is safe and appropriate for you, and to adapt it if needed. It is not shared with anyone else, is not used for marketing, and is kept for no longer than is necessary. You can ask us to delete it at any time, though we may then be unable to offer certain sessions.

Who we share it with

We use service providers who process data on our behalf: our website platform (Wix), our payment provider, our email marketing platform (Kit), our booking system, and our accountant. Each is bound to use your data only as instructed.

We do not sell your data. We do not share it with anyone else unless we are legally required to.

Some providers may process data outside the UK. Where they do, appropriate safeguards are in place.

How long we keep it

Booking and payment records: 6 years, for tax purposes
Health disclosures: 7 years
Mailing list: until you unsubscribe
Enquiries: 2 years

Your rights

You have the right to access your data, have it corrected, have it deleted, restrict or object to how we use it, and receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time.

To exercise any of these, email hello@michellemurray.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Marketing

You can unsubscribe from our emails at any time using the link in any email, or by emailing us.

This website uses cookies that are necessary for it to function, and — with your consent — cookies that help us understand how the site is used. You can manage your preferences through the cookie banner or your browser settings.