Inbeing Privacy Notice
Last updated: 21 October 2026
1. Who we are
At Inbeing, we create spaces for people to pause, reconnect, explore and grow. We believe feeling safe and respected is essential to that experience. We bring the same care to your personal information. This notice explains what we collect, how we use it, and your choices and rights.
Inbeing is run by Inbeing Ltd, a company registered in England and Wales (company number 15155514). Our registered office is 45 Castelnau, London SW13 9RT.
We are the controller of the personal data described in this notice. This means we decide how and why it is used. For our Holotropic Breathwork® workshops, we share that responsibility with our facilitators (see section 4).
We are registered with the Information Commissioner's Office (ICO) under registration number 00016025175.
Contact us about anything in this notice:
Email: hello@inbeing.co.uk
We do not have a Data Protection Officer, as we are not required to appoint one. Veronica and Suncica, our co-founders, are responsible for data protection.
2. What personal data we collect
Contact details: name, email address, phone number and postal address. Provided by you.
Booking and payment details: what you booked, amounts paid and transaction references. We do not see or store full card details. Provided by you and our payment provider.
Communications: emails, messages and enquiry forms you send us. Provided by you.
Website data: IP address, browser type, pages visited and cookies. Collected from your device. See our [cookie policy LINK].
Health and wellbeing information: medical history, medications, physical and mental health, and pregnancy. Provided by you through screening forms and preparation calls (see section 4).
Emergency contact: the name and phone number of someone we can contact. Provided by you. Please tell them you have shared their details.
Photos and recordings: images or video from events, taken only with your consent. Provided by you and us.
Our services are for adults aged 18 and over. We do not knowingly collect data from children.
3. How we use your data and our lawful bases
The law requires a lawful basis for every use of personal data. Ours are:
To take and manage bookings, deliver programmes and events, and send joining details. Lawful basis: contract. We need this data to provide what you booked.
To answer your enquiries. Lawful basis: legitimate interests, in responding to people who contact us.
To keep financial and tax records. Lawful basis: legal obligation.
To run, secure and improve our website. Lawful basis: legitimate interests, and consent for non-essential cookies.
To use photos or recordings in our marketing. Lawful basis: consent. You can withdraw it at any time.
To assess suitability and keep you safe at workshops and retreats. Lawful basis: contract, plus your explicit consent for health data (see section 4).
Where we rely on legitimate interests, we have weighed them against your rights. You can object at any time (see section 7).
We do not sell your data. We do not make decisions about you using solely automated means.
4. Workshops, retreats and your health information
Health information is "special category" data under UK law, so we protect it with extra care. We collect it only for experiential work such as Holotropic Breathwork®, where some physical and psychological conditions affect whether it is safe to take part.
What we collect. Your answers to our registration form and medical screener, and notes made during your one-to-one preparation call.
Why. To decide whether the workshop is suitable for you, whether we need to adapt anything, and how to support you safely on the day.
Our lawful basis. We process it to provide the workshop you have applied for (contract), and only with your explicit consent, which you give by ticking the consent box on the screener. If you have a medical emergency and cannot consent, we may share relevant information with emergency services to protect your life (vital interests).
Who sees it. Only Veronica, Suncica and the workshop facilitators. The facilitators take part in your preparation call and in deciding whether the workshop is suitable for you, so for our workshops we and the facilitators are joint controllers: we decide together how this data is used, and you can contact either of us to exercise your rights. Veronica and Suncica hold your information. The facilitators can see it during the preparation process and the workshop only, and do not keep copies. A summary of our arrangement is available on request.
What we will not do. We will not contact your doctor or anyone else about your health without your permission, except in an emergency. We will not use your health information for marketing.
If you do not provide it, or withdraw consent. Screening is a condition of taking part, so we cannot offer you a place without it. You can withdraw consent at any time by emailing hello@inbeing.co.uk. This will not affect anything we did before you withdrew, but it does mean you cannot attend. Refund terms apply: see our Cancellation & Refund Policy.
Paper notes. Any printed or handwritten notes used at a workshop are kept with Veronica or Suncica at all times and securely destroyed afterwards.
5. Who we share your data with
We share personal data only where needed to run Inbeing:
Workshop facilitators: for the joint assessment, delivery and safety of our workshops (see section 4). They can see your contact details, screening answers and call notes during the preparation process and the workshop, and do not keep copies.
Google: for email, forms and document storage. Google holds anything stored in our account.
Squarespace: for hosting our website. Squarespace holds website data and enquiry forms.
Stripe: for taking payments. Stripe receives booking and payment details.
Our accountant, John Parsons: for accounts and tax. He receives payment records.
Emergency services: only if your life or health is at risk. They receive information relevant to the emergency.
Service providers act only on our instructions, under contracts that require them to keep your data secure. We may also disclose data where the law requires it.
Transfers outside the UK. Some providers, such as Google, may store data outside the UK, including in the United States. Where they do, we rely on safeguards recognised under UK law, such as the UK-US Data Bridge or the ICO's International Data Transfer Agreement. Contact us for details.
6. How long we keep your data
We keep personal data only as long as we need it, then delete it securely.
Health information and call notes, if you do not attend: deleted within 3 months of the workshop.
Health information and call notes, if you attend: deleted 1 year after the workshop.
Booking and payment records: kept for 6 years from the end of the financial year, for tax purposes.
Photos and recordings: kept until you withdraw consent.
7. Your rights
Under UK data protection law you have the right to:
Access a copy of the personal data we hold about you
Rectify data that is wrong or incomplete
Erase your data in some circumstances
Restrict how we use your data while a concern is looked into
Object to our use of your data where we rely on legitimate interests, and to direct marketing at any time
Portability: receive data you gave us in a format you can reuse
Withdraw consent at any time, where we rely on it
To use any of these rights, email hello@inbeing.co.uk. There is no charge in most cases. We will reply within one month, and may ask you to confirm your identity first.
Complaints. Please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice. We will update this notice when our practices change and post the new version here.