How we collect, use, and protect your personal data, in line with the UK General Data Protection Regulation (UK GDPR).
Upasana Somatic (“we”, “us”) is committed to protecting your privacy. This policy explains what personal information we collect, why, how we look after it, and your rights. We are the data controller. For any question about your data, contact [email protected].
Victor Soto, trading as Upasana Somatic, 25 Lock Court, 1 Essex Wharf, Hackney, London E5 9HP.
We process personal data only where we have a lawful basis to do so:
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Respond to enquiries and arrange sessions | Legitimate interests; steps to enter a contract |
| Deliver the sessions you book and keep session records | Performance of a contract |
| Assess your suitability and safety for breathwork/somatic work | Explicit consent for the health data, plus a health/safety interest |
| Send the free practice and our newsletter | Consent (you can withdraw any time) |
| Take payment | Performance of a contract |
| Meet legal, tax and insurance obligations | Legal obligation; legitimate interests |
For special category (health) data, our condition for processing is your explicit consent, given on the screening/consent form. You can withdraw that consent, though we may be unable to safely offer certain sessions without the information.
We use trusted third parties to run the practice, and share only what’s necessary:
Each processes your data under its own terms and provides appropriate safeguards. Some may process data outside the UK; where they do, appropriate transfer safeguards (such as UK-approved clauses) are in place. We do not sell your data, ever.
Health and consent forms are stored securely, access-restricted, and kept separate from general marketing data. Paper forms, if any, are kept locked; digital forms are held in access-controlled, encrypted storage.
You have the right to access your data, correct it, ask us to delete it, object to or restrict certain processing, withdraw consent, and request portability. To exercise any right, email [email protected]. You also have the right to complain to the ICO (ico.org.uk), though we’d appreciate the chance to put things right first.
Our work is offered to adults (18+). Where we ever work with a minor, we require consent from a parent or guardian.
We use a small number of cookies. Essential cookies keep the site working and remember your cookie choice. If you consent, we also use privacy-friendly, cookieless analytics to understand how the site is used — this is anonymous and is never used for tracking or advertising.
You can change your choice at any time using the control below.
We may update this policy; the current version always lives on our website with its effective date.