Privacy policy

Last updated: 8th June 2026

1. Who We Are

Louminosity (“we”, “our”, or “us”) provides sound baths and wellness events. We act as the "data controller" for the personal information collected from our clients and website visitors under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The Data We Collect

We collect and process various types of information to run our events safely and effectively:

  • Identity & Contact Data: First name, last name, email address, and phone number when you book an event or subscribe to our newsletter.

  • Health & Wellness Data (Special Category Data): Medical conditions, injuries, pregnancy status, or sound sensitivities submitted during booking. We collect this strictly to ensure our sound baths are safe for you to attend.

  • Technical & Usage Data: Your internet protocol (IP) address, browser type, and details about how you interact with our website.

3. How We Collect Your Data

  • Direct Interactions: When you fill out booking forms, sign health waivers, contact us, or opt into our marketing.

  • Automated Technologies: When you browse our website, Google Analytics automatically tracks technical behavior using cookies.

4. How and Why We Use Your Data

We only use your personal data when the law allows us to. We rely on the following legal bases:

  • Contractual Necessity: To process your booking and admit you to our events.

  • Explicit Consent: We will only collect health-related data (Special Category Data) or send marketing emails if you explicitly tick a box giving us your consent.

  • Legitimate Interests: To analyze website performance and improve our wellness offerings.

5. Third-Party Sharing and International Transfers

We do not sell your data. However, we share your information with trusted service providers to run our business:

  • Email Marketing: We use Mailchimp to store our newsletter list and send marketing updates.

  • Website Analytics: We use Google Analytics to understand website traffic.

  • Data Transfers: Because companies like Mailchimp and Google operate globally, your data may be transferred outside the UK to the US. We ensure these transfers are legally protected by Standard Contractual Clauses (SCCs) and robust data security agreements.

6. Data Retention

  • Marketing Data: We keep your contact information for newsletter updates until you choose to unsubscribe.

  • Health and Booking Data: We retain your event booking details and health waivers for 5yrs following an event to comply with our professional insurance requirements.

7. Your Legal Rights

Under UK data protection laws, you have the right to access the data we hold about you, request corrections, ask us to delete your info, or withdraw your consent for health data tracking and marketing at any time.

To exercise these rights, email us at [Insert Contact Email]. You can also file a complaint with the Information Commissioner’s Office (ICO), the UK's data protection authority.

8. Read cookie policy here.