GDPR & Privacy Policy

Upasana Somatic is committed to protecting your privacy. This policy explains what personal data we collect through this website, how we use it, and the rights you hold over it under the UK GDPR and the Data Protection Act 2018.

Who we are

Upasana Somatic, founded by Yaku, is the data controller responsible for the personal data collected through this website. If you have any questions about this policy or how your data is handled, you can reach us through the Get in Touch page, or by email at [privacy contact email — to confirm].

What we collect and why

• Information you give us. When you complete a contact or enquiry form, we collect details such as your name, email address, and anything you choose to share in your message. We use this only to respond to you and to arrange or tailor the work you are enquiring about.
• Newsletter. If you sign up to our newsletter, we collect your email address so we can send occasional updates. You can unsubscribe at any time using the link in any email.
• Website analytics. We may use cookies and analytics tools to collect anonymised information about how the site is used. This helps us understand what is useful and improve the site over time. It does not identify you personally.

Our lawful basis for using your data

We process personal data only where we have a lawful basis to do so:

• Your consent — for example, when you subscribe to the newsletter or accept non-essential cookies. You can withdraw consent at any time.
• Performance of a contract — to provide the sessions or services you have asked for.
• Legitimate interests — to respond to enquiries, keep the website secure, and improve how it works, provided this does not override your rights.

Cookies

Cookies are small text files placed on your device when you visit a website. We use them to help the site function and to understand how it is used. You can accept or decline non-essential cookies, and you can manage or delete cookies through your browser settings. Declining some cookies may limit certain features of the site.

How long we keep your data

We keep personal data only for as long as it is needed for the purpose it was collected, or for as long as the law requires. When it is no longer needed, we securely delete or anonymise it.

Keeping your data secure

We use appropriate technical and organisational measures to protect your data against loss, misuse, or unauthorised access. No method of transmission or storage online is completely secure, however, so we cannot guarantee absolute security.

Sharing your data

We do not sell your personal data. We may share it with trusted service providers who help us run the website and communicate with you — for example, our website host and email or newsletter platforms. These providers may only use your data for the purposes we specify, and are required to keep it secure.

Your rights

Under the UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct data that is inaccurate or incomplete.
• Erasure — ask us to delete your data in certain circumstances.
• Restriction — ask us to limit how we use your data.
• Portability — ask to receive your data in a portable format.
• Object — object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent — where our processing relies on consent.

To exercise any of these rights, please contact us through the Get in Touch page. We will respond within the timeframes set out in law. Certain legal obligations may, in some cases, prevent us from acting on a request straight away — if so, we will explain why.

Complaints

If you have a concern about how we handle your data, we would welcome the chance to address it first. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised date above.