LIGHTENINGS WAY
Soul Food Sessions with Nicks & her Herd
Privacy Policy
Last updated: August 2026
1. About this Privacy Policy
This Privacy Policy explains how Nicola Corbett (“I”, “me”, “my” or “the Business”) collects, uses, stores and protects your personal information when you visit or use www.soulfood.co.uk (“the Website”), contact me, book a yoga class or session, join a mailing list, purchase a service, or otherwise interact with my business.
I am committed to respecting your privacy and handling your personal information responsibly and in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who is responsible for your information?
The data controller responsible for your personal information is:
Nicola Corbett
If you have any questions about how I use your personal information, please contact me using the details above.
3. Information I may collect
Depending on how you interact with me, I may collect some or all of the following information:
Information you provide directly
This may include:
-
Your name
-
Email address
-
Telephone number
-
Billing or payment information
-
Address
-
Emergency contact details, where relevant to a class, workshop or retreat
-
Booking and attendance information
-
Information you provide when contacting me
-
Information you provide when subscribing to my mailing list
-
Feedback, reviews or testimonials you choose to provide
Wellbeing and health information
For certain yoga classes, workshops, retreats or one-to-one sessions, I may ask you to provide information about injuries, physical limitations, medical conditions, pregnancy, medications or other health or wellbeing matters that could affect your participation.
I will only ask for information that is reasonably necessary to help me provide an appropriate and safe service.
Some health information is considered special category data under UK data protection law. Where I process this type of information, I will do so only where I have an appropriate legal basis and, where required, your explicit consent.
You are not required to provide health information unless it is necessary for the particular service you are requesting. However, if you choose not to provide information that is relevant to your safe participation, I may be unable to provide certain services.
Information collected automatically
When you use my Website, certain technical information may be collected automatically, such as:
-
IP address
-
Browser type and version
-
Device information
-
Operating system
-
Approximate location
-
Pages visited and how you use the Website
-
Referral information
-
Cookies and similar technologies
Please see the Cookies section below for further information.
4. How I use your information
I may use your personal information to:
-
Respond to enquiries
-
Process bookings and payments
-
Provide yoga classes, holistic sessions, workshops, courses and retreats
-
Communicate with you about your booking or service
-
Manage my relationship with you
-
Understand your needs and, where appropriate, adapt a session to support your participation
-
Send service-related information
-
Send newsletters or marketing communications where you have agreed to receive them
-
Process feedback or testimonials that you have provided
-
Maintain business and financial records
-
Improve my Website, services and customer experience
-
Prevent fraud, misuse or other unlawful activity
-
Comply with legal and regulatory obligations
-
Establish, exercise or defend legal claims where necessary
I
will not use your personal information for purposes that are incompatible with those described in this Privacy Policy unless permitted or required by law.
5. Our legal basis for using your information
Under UK data protection law, I must have a lawful basis for processing your personal information.
Depending on the circumstances, I may rely on:
Contract: Where processing your information is necessary to provide a class, session, booking or other service you have requested.
Legitimate interests: Where processing is necessary for the reasonable running and development of my business, provided that my interests do not override your rights.
Consent: Where you have actively agreed to a particular use of your information, such as receiving certain marketing communications or, where applicable, processing special category health information.
Legal obligation: Where I need to process information to comply with a legal requirement, such as accounting or tax obligations.
Where I rely on consent, you can withdraw that consent at any time.
6. Marketing
If you choose to subscribe to my newsletter or marketing communications, I may use your name and email address to send you information about:
-
Yoga classes
-
Workshops and courses
-
Retreats
-
Events
-
New services
-
Offers
-
Other information relating to my business that I believe may be relevant to you
You can unsubscribe at any time by clicking the unsubscribe link in a marketing email or by contacting me at nicolacorbett@mac.com.
Withdrawing consent will not affect the lawfulness of processing carried out before you withdrew your consent.
7. Who I share your information with
I will not sell or rent your personal information.
I may share information with trusted third parties where this is necessary to operate my business and provide services to you.
Depending on how my business operates, these may include:
-
Booking and scheduling platforms
-
Payment providers
-
Website hosting providers
-
Email and newsletter providers
-
Accounting and bookkeeping providers
-
IT and technical service providers
-
Professional advisers
-
Insurers, where necessary
-
Legal or regulatory authorities where I am legally required to provide information
These providers should only process your information in accordance with applicable data protection requirements and, where appropriate, my instructions.
Third-party services I use include:
Wix and Setmore
You should check the privacy policies of these providers for further information about how they process personal information.
8. Payments
Where you make a payment, your payment details may be processed directly by a third-party payment provider such as [STRIPE / PAYPAL / OTHER].
I do not normally have access to your full card or payment details.
Payment providers may process your information in accordance with their own privacy policies and terms.
9. Cookies
My Website may use cookies and similar technologies.
Cookies are small text files placed on your device that can help a website function, remember preferences, understand how visitors use the Website and, where applicable, support marketing.
I may use:
-
Essential cookies, which are necessary for the Website to operate;
-
Analytics cookies, which help me understand how visitors use the Website; and
-
Marketing or advertising cookies, where applicable.
Where required by law, I will ask for your consent before placing non-essential cookies on your device.
You can manage cookies through your browser settings and, where available, through the cookie preferences on my Website.
10. How long I keep your information
I will only keep your personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including where necessary to meet legal, accounting, insurance or reporting requirements.
The exact retention period will depend on the type of information and why it is being processed.
For example:
-
Booking and client information may be retained for as long as reasonably necessary to manage our relationship and for relevant legal or insurance purposes.
-
Financial and accounting records will be retained for the period required by applicable law.
-
Marketing information will generally be retained until you unsubscribe or it is otherwise no longer appropriate to keep it.
When information is no longer required, I will securely delete it or anonymise it where appropriate.
11. Keeping your information secure
I take reasonable technical and organisational measures to protect your personal information against loss, misuse, unauthorised access, alteration or disclosure.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
12. International transfers
Some of the third-party services I use may store or process personal information outside the UK.
Where personal information is transferred outside the UK, I will take appropriate steps to ensure that the transfer is lawful and that your information receives an appropriate level of protection under applicable UK data protection law.
13. Your rights
Under UK data protection law, you may have the right to:
-
Ask for a copy of the personal information I hold about you;
-
Ask me to correct inaccurate or incomplete information;
-
Ask me to delete your personal information in certain circumstances;
-
Ask me to restrict how I process your information in certain circumstances;
-
Object to certain types of processing;
-
Ask to receive your information in a portable format in certain circumstances;
-
Withdraw consent where I rely on consent as the legal basis for processing.
These rights are subject to certain legal exceptions and may not apply in every circumstance.
To exercise your rights, please contact me at:
I may need to ask for information to verify your identity before responding to a request.
14. Complaints
If you have concerns about how I have handled your personal information, please contact me first using the details above. I will do my best to resolve your concerns.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
You can find further information on the ICO's website at ico.org.uk.
15. Children's privacy
My services are intended for Adults and Children with parental consent.
I do not knowingly collect personal information from children without appropriate consent or involvement from a parent or guardian where required.
If you believe that I have collected information about a child inappropriately, please contact me.
16. Links to other websites
My Website may contain links to third-party websites, including social media platforms, booking services or other resources.
I am not responsible for the privacy practices or content of those websites. You should review their privacy policies before providing them with personal information.
17. Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to my business, services, technology or legal requirements.
The latest version will always be published on this page, with the date shown at the top.
18. Contact me
If you have any questions about this Privacy Policy or how I use your personal information, please contact:
Email: nicolacorbett@mac.co m
Last updated: August 2026