Privacy Policy

Glowing & Growing ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK privacy laws.

 

This policy applies to personal data we collect through our website, services, communications, and any other interactions you have with us.

​

1. Who We Are (Data Controller)

 

Glowing & Growing is the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how we handle your data, you can contact us at:

 

Email: glowingandgrowing@outlook.com

---

2. The Personal Data We Collect

 

We may collect and process the following types of personal data:

Identity Data: Name, username, or similar identifiers

Contact Data: Email address, phone number, postal address

Technical Data: IP address, browser type and version, device information, operating system

Usage Data: Information about how you use our website or services

Marketing and Communications Data: Your preferences in receiving marketing from us

​

Due to the nature of our services, we may collect limited special category data, such as basic health information about you or your baby, where necessary to deliver safe and appropriate baby massage or yoga sessions. This data will only be collected with your explicit consent and will be handled with additional care and confidentiality.

---

3. How We Collect Your Data

 

• We collect personal data in the following ways:

• When you contact us directly via email, WhatsApp, phone, or social media

• When you book or manage bookings through our online booking system

• When you attend an in-person baby massage or baby yoga course

• When you complete online or paper registration, consent, or health forms

• When you provide feedback or testimonials via email or online platforms

 

Please note that communications via WhatsApp and email are stored securely and only accessed for the purpose of managing bookings, delivering services, and communicating with you.

---

4. How We Use Your Personal Data

 

Under UK GDPR, we must have a lawful basis for using your personal data. We use your data for the following purposes:

 

Purpose Lawful Basis

 

To manage bookings and deliver in-person courses | Performance of a contract

To ensure sessions are safe and suitable for you and your baby | Explicit consent (special category data)

To communicate course information and updates | Performance of a contract

To respond to enquiries | Legitimate interests

To improve our services | Legitimate interests

To send optional marketing communications | Consent

To comply with legal or insurance obligations |  Legal obligation

---

 

5. Marketing Communications

 

We will only send you marketing communications if you have given us your consent or if we are otherwise permitted by law.

You can opt out of marketing communications at any time by:

Contacting us directly glowingandgrowing@outlook.com

​

---

 

6. Cookies

 

Our website may use cookies and similar technologies to improve user experience and analyse website performance.

 

You can control or disable cookies through your browser settings. ​

---

 

7. Data Sharing

 

We do not sell your personal data.

 

As a sole trader, Glowing & Growing keeps personal data confidential and shares it only where necessary, including:

 

Online booking and payment system providers

 

Secure Microsoft PC based record keeping or email services

 

Professional advisers (such as accountants or insurers)

 

Regulators or authorities where required by law

 

All third parties are required to process your personal data securely and in accordance with UK data protection law.​

---

8. Data Security

 

We have put appropriate technical and organisational measures in place to protect your personal data from loss, misuse, unauthorised access, alteration, or disclosure.

---

9. Data Retention

 

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

---

10. Your Data Protection Rights

 

Under UK GDPR, you have the right to:

 

Request access to your personal data

 

Request correction of inaccurate or incomplete data

 

Request erasure of your personal data (where applicable)

 

Object to or restrict processing of your personal data

 

Request data portability

 

Withdraw consent at any time (this will not affect the lawfulness of processing before withdrawal)

 

 

Please note that withdrawing consent for health-related information may mean we are unable to safely continue providing certain services.

 

To exercise any of these rights, please contact us using the details above.

---

11. Children’s Data

 

Our services are designed for adults attending with their babies. We only collect limited personal data relating to babies (such as first name, age, and relevant health considerations) strictly for the purpose of delivering safe sessions.

 

All baby-related data is provided by the parent or legal guardian and processed with care and confidentiality.

---

11. Complaints

 

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

 

Website: https://www.ico.org.uk

We would appreciate the opportunity to address your concerns before you contact the ICO.

 

---

 

12. Changes to This Privacy Policy

 

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.