Last updated: [July 2026]

Soma Therapi (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, book a class or therapy session, sign up to our mailing list, or otherwise engage with our services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.

1. Who we are

Soma Therapi
at Monmouth House, Mamhilad Park Estate, Pontypool, NP4 0HZ

Email: bethan@somatherapi.co.uk
Phone: 07508911566

For the purposes of data protection law, Soma Therapi is the data controller of the personal information described in this policy.

2. The information we collect

We may collect and process the following categories of personal information:

Information you provide to us directly

• Your name
• Email address
• Telephone number
• Postal address, if you provide it
• Information submitted through contact forms, enquiry forms or booking forms
• Information you provide when you sign up to our newsletter or mailing list
• Payment and billing information where relevant (although card payment details may be processed by our third-party payment provider rather than stored by us directly)
• Information you share with us when booking a yoga class, workshop, retreat, therapy session or consultation

Health and wellbeing information

If you book therapy, somatic counselling, or certain wellbeing services, we may collect information relating to your physical or mental health, wellbeing, medical history, injuries, accessibility needs, emergency contact information, or other relevant background details where necessary to deliver services safely and appropriately.

This type of information may be treated as special category personal data under UK GDPR.

Information collected automatically when you use our website

We may automatically collect certain technical information when you visit our website, such as:

• IP address
• Browser type and version
• Device type
• Operating system
• Pages visited and time spent on the website
• Referring website addresses
• Cookie and usage data

3. How we collect your information

We collect personal information in the following ways:

• When you complete a contact or enquiry form on our website
• When you email, call or otherwise contact us
• When you book a class, workshop, event or therapy session
• When you complete a health, intake or consent form
• When you subscribe to our newsletter or mailing list
• Through cookies and analytics tools used on our website
• Through third-party booking, scheduling or payment platforms where you choose to use them

4. How we use your personal information

We use your personal information to:

• Respond to your enquiries and communicate with you
• Manage bookings, appointments, classes, workshops and events
• Deliver yoga, therapy, counselling, wellbeing and related services
• Assess suitability, safety and support needs before providing a service
• Maintain client records where appropriate
• Take payment and manage accounts
• Send service-related communications, including booking confirmations, reminders, updates and follow-up information
• Send marketing emails or newsletters where you have opted in to receive them
• Improve our website, services and customer experience
• Meet legal, regulatory, insurance, safeguarding, health and safety, and professional obligations
• Protect our business, clients, staff and visitors from fraud, misuse or harm

5. Our lawful bases for processing

Under UK GDPR, we must have a lawful basis for processing your personal data. Depending on the circumstances, we may rely on one or more of the following lawful bases:

Contract

Where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you, for example when you book a class, therapy session or event.

Legitimate interests

Where processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include:

• responding to enquiries;
• administering bookings and client relationships;
• improving our services and website;
• keeping appropriate records;
• ensuring the safe and effective operation of our business.

Legal obligation

Where we need to process your information to comply with a legal or regulatory obligation.

Consent

We may rely on your consent in certain circumstances, for example:

• where you opt in to receive marketing emails; or
• where we ask you to provide certain optional information.

You can withdraw consent at any time, although this will not affect the lawfulness of processing carried out before withdrawal.

6. Special category data

Some of the services offered by Soma Therapi may involve the collection of special category data, particularly information about health, wellbeing, accessibility, injury, trauma history, or mental health where relevant to the safe and appropriate provision of services.

Where we process special category data, we will only do so where we have both:

1. a lawful basis under Article 6 UK GDPR; and
2. an additional condition for processing under Article 9 UK GDPR.

Depending on the context, this may include:

• your explicit consent;
• where processing is necessary for the provision of health, therapeutic or wellbeing support;
• where processing is necessary to protect your vital interests;
• where processing is necessary for the establishment, exercise or defence of legal claims.

We will only collect health or wellbeing information that is genuinely relevant and necessary for the service being provided.

7. Marketing communications

If you sign up to our newsletter or agree to receive updates from us, we may send you emails about classes, workshops, retreats, offers, events or other Soma Therapi news.

You can unsubscribe from marketing emails at any time by:

• clicking the unsubscribe link in any email; or
• contacting us directly at [insert email address].

We will not send you marketing communications where we are required to have consent unless you have provided that consent.

8. Sharing your information

We do not sell your personal data.

We may share your information with trusted third parties where necessary for the operation of our business and the delivery of our services, including:

• website hosting providers;
• email and newsletter providers;
• booking and scheduling platforms;
• payment processors;
• accounting or administrative support providers;
• IT and website support providers;
• professional advisers such as insurers, solicitors or accountants;
• regulators, law enforcement, safeguarding authorities or other bodies where we are legally required or permitted to do so.

We require third-party service providers to respect the security of your data and to process it in accordance with the law.

9. International transfers

Some of our third-party providers may store or process personal data outside the UK. Where this happens, we will take reasonable steps to ensure that appropriate safeguards are in place so that your information remains protected in accordance with UK data protection law.

10. How long we keep your information

We will only keep your personal information for as long as is reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, insurance, safeguarding, professional or accounting requirements.

Retention periods may vary depending on the nature of the information and the service provided. For example:

• general enquiry data may be kept for a limited period to allow us to respond and maintain records;
• client booking and service records may be retained for an appropriate period in line with business, insurance, safeguarding and professional requirements;
• financial records may be retained for the period required by tax and accounting law.

When we no longer need your information, we will securely delete or anonymise it.

11. Cookies and website analytics

Our website may use cookies and similar technologies to improve your browsing experience, understand how visitors use the website, and support website functionality.

Cookies may include:

• essential cookies needed for the website to function properly;
• analytics cookies to help us understand website traffic and usage;
• marketing or preference cookies where applicable.

You can control cookies through your browser settings and, where applicable, through our website cookie banner or preferences tool.

If we use Google Analytics or similar services, those tools may collect anonymised or pseudonymised usage information to help us improve the website.

12. Security

We take appropriate technical and organisational measures to protect your personal information from accidental loss, misuse, unauthorised access, alteration or disclosure.

However, no method of transmitting data over the internet or storing data electronically is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

13. Your data protection rights

Under UK data protection law, you may have the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete personal information;
• request erasure of your personal information in certain circumstances;
• request restriction of processing in certain circumstances;
• object to processing carried out on the basis of legitimate interests;
• withdraw consent where processing is based on consent;
• request the transfer of your personal data to you or another provider, where applicable;
• lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise any of these rights, please contact us using the details below.

14. Complaints

If you have any questions or concerns about how we handle your personal information, please contact us first and we will do our best to resolve the issue.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK regulator for data protection matters:

Information Commissioner’s Office
Website: https://ico.org.uk
Helpline: 0303 123 1113

15. Contact us

If you have any questions about this Privacy Policy or how your personal information is handled, please contact:

Soma Therapi at Monmouth House, Mamhilad Park Estate, Pontypool, NP4 0HZ

Email: bethan@somatherapi.co.uk
Phone: 07508911566

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or website practices. Any updates will be posted on this page and the “Last updated” date will be amended accordingly.