The Space In Btwn ("we," "us," or "our") respects your privacy and is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

This Privacy Policy explains how we collect, use, and protect your information when you visit https://thespaceinbtwn.uk (the "Site") and when you purchase or use our products and services.

----------------------------------------------------------------

1. Who We Are

The Space In Btwn is the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how we handle your information, you can contact us at:

Email: hello@thespaceinbtwn.uk

----------------------------------------------------------------

2. What Information We Collect

We may collect, use, store, and transfer different kinds of personal data about you:

Identity Data: First name, last name, username or similar identifier.

Contact Data: Email address, billing address.

Transaction Data: Details about payments to and from you, products and services you have purchased.

Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, platform.

Usage Data: Information about how you use our website, products, and services.

Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

Special Categories of Personal Data: We do NOT collect any special categories of personal data (such as health information, religious beliefs, or political opinions) unless you voluntarily provide it (for example, in a message or comment). If you do provide such information, we will treat it with the highest level of care and only use it as necessary to respond to you.

----------------------------------------------------------------

3. How We Collect Your Information

We collect information through:

- Direct interactions: You provide information when you create an account, purchase a course or meditation, subscribe to our newsletter, fill out a form, or contact us.

- Automated technologies: As you interact with our website, we automatically collect Technical Data about your equipment and browsing actions through cookies and similar technologies.

- Third parties: We may receive information from payment processors (such as Stripe or PayPal) and analytics providers (such as Google Analytics).

----------------------------------------------------------------

4. Lawful Basis for Processing (GDPR Requirement)

Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

Purpose/Activity | Lawful Basis

----------------------------------------

To register you as a new customer | Performance of a contract with you

To process and deliver your orders | Performance of a contract with you

To manage our relationship with you | Performance of a contract; Necessary for our legitimate interests

To send you administrative information | Necessary for our legitimate interests

To send you marketing communications | Consent (you can opt out at any time)

To improve our website and services | Necessary for our legitimate interests

To comply with legal obligations | Compliance with a legal obligation

Legitimate Interests: Where we rely on legitimate interests, we balance those interests against your rights and freedoms to ensure they do not outweigh your rights. Our legitimate interests include running our business, providing direct marketing, improving our services, and preventing fraud.

Consent: Where we rely on your consent, you have the right to withdraw that consent at any time by contacting us or clicking "unsubscribe" in any marketing email.

----------------------------------------------------------------

5. Cookies and Tracking Technologies

We use cookies to enhance your experience on our site. Cookies are small text files placed on your device.

Types of cookies we use:

- Strictly Necessary Cookies: Essential for the website to function (cannot be turned off)

- Preference Cookies: Remember your settings and preferences

- Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics)

- Marketing Cookies: Track your browsing habits to deliver relevant advertisements

Cookie Consent: When you first visit our site, you will see a cookie banner asking for your consent to place non-essential cookies on your device. You can change your cookie preferences at any time through your browser settings.

----------------------------------------------------------------

6. How We Use Your Information

We use your information only when we have a lawful basis to do so. This includes:

- Registering you as a new customer

- Processing your orders and sending confirmation emails

- Managing your account

- Responding to your inquiries

- Sending administrative information (e.g., changes to our terms)

- Sending marketing communications (only with your consent)

- Improving our website, products, and services

- Complying with legal obligations

- Protecting our business against fraud

----------------------------------------------------------------

7. How We Share Your Information

We do NOT sell or rent your personal data to third parties.

We may share your information with trusted third-party service providers who help us operate our business, including:

Third Party | Purpose | Location

----------------------------------------

Stripe / PayPal | Payment processing | USA / UK / EU

ConvertKit / Mailchimp | Email marketing | USA / UK / EU

Squarespace / Kajabi | Website hosting | USA / UK / EU

Google Analytics | Website analytics | USA / EU

GDPR Note: Where we transfer your data outside the UK or EU, we ensure it is protected by appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

We may also disclose your information if required by law or to protect our rights.

----------------------------------------------------------------

8. International Transfers

Your personal data may be transferred to, and stored in, countries outside the UK and European Economic Area (EEA). These countries may have data protection laws different from those in your home country.

When we transfer your data internationally, we ensure it is protected by:

- Transferring only to countries that the European Commission has deemed to have adequate data protection laws

- Using Standard Contractual Clauses approved by the European Commission

- Ensuring our third-party service providers comply with GDPR requirements

----------------------------------------------------------------

9. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees and contractors who have a legitimate need to know.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

----------------------------------------------------------------

10. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.

Examples:

- Transaction data: Retained for 6–7 years for tax and accounting purposes

- Marketing preferences: Retained until you withdraw consent

- Account information: Retained until you delete your account

----------------------------------------------------------------

11. Your GDPR Rights

Under the GDPR, you have the following rights:

Right | Description

----------------------------------------

Right to be informed | You have the right to be informed about how we use your data (this Privacy Policy fulfills that right).

Right of access | You can request a copy of the personal data we hold about you.

Right to rectification | You can ask us to correct inaccurate or incomplete data.

Right to erasure (Right to be forgotten) | You can ask us to delete your personal data in certain circumstances.

Right to restrict processing | You can ask us to limit how we use your data in certain circumstances.

Right to data portability | You can request that we transfer your data to another organization.

Right to object | You can object to our processing of your data for direct marketing or legitimate interests.

Rights related to automated decision-making | You have rights relating to automated decision-making and profiling (we do not engage in automated decision-making).

How to exercise your rights: To exercise any of these rights, please contact us at hello@thespaceinbtwn.uk. We will respond within 30 days as required by law.

No fee usually required: You will not have to pay a fee to access your personal data. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Right to lodge a complaint: If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or your local data protection authority in the EU.

- UK ICO: https://ico.org.uk

- EU data protection authorities: https://edpb.europa.eu

----------------------------------------------------------------

12. Email Marketing and Your Consent

We will only send you marketing emails if you have given us your consent (for example, by signing up for our newsletter).

You can withdraw your consent at any time by clicking the "unsubscribe" link at the bottom of any marketing email or by contacting us directly.

Transactional Emails: Even if you withdraw consent for marketing, you will still receive essential transactional emails related to your purchases, account, or membership (such as order confirmations and password resets).

----------------------------------------------------------------

13. Children's Privacy

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

----------------------------------------------------------------

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

If we make material changes, we will notify you by email or through a notice on our website before the changes take effect.

We encourage you to review this Privacy Policy periodically.

----------------------------------------------------------------

15. Contact Information

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

The Space In Btwn

Email: hello@thespaceinbtwn.uk

Website: https://thespaceinbtwn.uk

----------------------------------------------------------------

✧ The Space In Btwn