1. Who we are
Shruti Turner is the data controller for personal information processed through this website and the services described here.
For privacy questions, email shruti@shrutiturner.co.uk.
2. Information we collect
Depending on how you use the website and services, we may collect:
- name, email address, phone number and contact preferences
- account and authentication information
- enquiry, consultation and coaching information
- health, accessibility and movement information you choose to provide
- workshop, retreat or event booking details
- payment status and transaction references supplied by payment providers
- newsletter consent and email engagement information
- messages, feedback and support correspondence
- technical information such as IP address, browser, device and security logs
3. Special-category health information
Health information is special-category personal data. Where it is needed to deliver a service safely, we process it with your explicit consent and only for the purposes explained when it is collected.
You may withdraw consent, but doing so may mean we cannot safely continue the relevant service. Legal obligations and records already required to establish or defend legal claims may still apply.
4. How we use information
We use personal information to:
- respond to enquiries and recommend suitable support
- provide coaching, training, yoga, workshops, retreats and events
- manage accounts, payments and service communications
- tailor services to health, access and capacity information
- send marketing where you have consented
- keep the website secure, prevent misuse and meet legal obligations
- understand and improve our services
5. Lawful bases
We rely on contract where processing is needed to provide a service, consent for marketing and special-category health information, legitimate interests for proportionate administration and security, and legal obligation where records must be retained or disclosed.
6. Service providers
We use carefully selected providers for website hosting, authentication, email, payments, coaching delivery, analytics, content and security. Providers process only the information needed for their function and are subject to contractual or equivalent safeguards.
Some providers may process data outside the United Kingdom. Where this occurs, we use recognised safeguards such as adequacy regulations or approved contractual clauses.
7. Sharing information
We do not sell personal data. Information may be shared with service providers, professional advisers, event partners where necessary and disclosed to authorities where required by law or to protect safety and legal rights.
8. Retention
We keep information only as long as reasonably needed for the purpose collected, contractual and insurance records, tax and accounting requirements, safety, disputes and legal claims. Retention periods vary by record type.
9. Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to processing, receive portable data, and withdraw consent. You may also complain to the UK Information Commissioner's Office.
10. Security
We use reasonable technical and organisational measures to protect personal information. No online system is completely secure, so please use a unique sign-in method and tell us promptly if you suspect unauthorised account access.
11. Changes and contact
We may update this policy as services or legal requirements change. The current version and effective date are shown on this page.
To exercise a privacy right or ask a question, email shruti@shrutiturner.co.uk.