PRIVACY & GDPR STATEMENT

Last updated: 03/09/2026

Heart Space is committed to protecting and respecting your personal information. This Privacy Statement explains how we collect, use, store and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and applicable UK data protection legislation.

1. Who we are

Heart Space provides massage training and related educational services.

For the purposes of data protection law, Heart Space is the organisation responsible for the personal information we collect about you.

Contact details:
Name: Tessa Creagh-Barry
Email: info@heartspaceschoolofhealingarts.com

2. Information we may collect

We may collect and process the following personal information:

  • Your name and contact details, including email address and telephone number.

  • Your address, where required for administrative or course purposes.

  • Information relating to your course booking, attendance and payments.

  • Records relating to your course progress, assessments and certificates.

  • Relevant health, medical or accessibility information where you choose or need to provide this for your participation in practical massage training.

  • Any other information you voluntarily provide to us.

3. How we use your information

We use your personal information to:

  • Process course enquiries and bookings.

  • Provide and administer your training.

  • Communicate with you about your course.

  • Maintain attendance, assessment and certification records.

  • Process payments and manage our business administration.

  • Meet any legal or regulatory requirements.

  • Respond to enquiries or requests.

  • Send marketing information where you have agreed to receive it, where required by law.

4. Our lawful basis for using your information

We will only use your personal information where we have a lawful basis to do so. Depending on the purpose, this may include:

  • Contract – where we need to process your information to provide the course or services you have booked.

  • Legal obligation – where we are required to keep or provide information to comply with legal requirements.

  • Legitimate interests – where processing is necessary for the legitimate interests of running and administering our training business, provided your rights and interests do not override those interests.

  • Consent – where you have given us clear permission to use your information for a specific purpose, such as certain marketing communications.

Where health or other sensitive personal information is collected, we will only process it where an appropriate additional legal condition applies and where necessary for the relevant purpose.

5. Sharing your information

We will not sell your personal information.

We may share your information with trusted service providers where necessary to operate our business, for example:

  • Payment providers.

  • Booking or course administration systems.

  • Email and IT service providers.

  • Professional advisers, where required.

  • Awarding or certification bodies, where applicable.

We will only share information where necessary and will take reasonable steps to ensure that appropriate safeguards are in place.

6. How long we keep your information

We will keep your personal information only for as long as reasonably necessary for the purposes for which it was collected, including for course administration, certification, legal, accounting and record-keeping purposes.

The length of time we retain information may vary depending on the type of information and the reason for holding it. When information is no longer required, it will be securely deleted or destroyed.

7. Keeping your information secure

We take appropriate organisational and technical measures to protect your personal information from unauthorised access, loss, misuse, alteration or disclosure.

Access to personal information is limited to those who need it for legitimate business or course administration purposes.

8. Your rights

Under UK data protection law, you may have rights including the right to:

  • Request access to the personal information we hold about you.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of your information in certain circumstances.

  • Request that we restrict how your information is used in certain circumstances.

  • Object to certain types of processing.

  • Request the transfer of certain information to another organisation where applicable.

  • Withdraw your consent at any time where we rely on consent to process your information.

To exercise any of these rights, please contact us using the details provided above.

9. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to make a complaint to the UK Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

10. Changes to this Privacy Statement

We may update this Privacy Statement from time to time. The most current version will be made available to students and prospective students when appropriate.