PRIVACY POLICY

Last updated: May 2026

This Privacy Policy explains how personal information is collected, used, stored, and protected when you visit or use the services of Rina Golan through www.rinagolan.co.

I am committed to protecting your privacy and handling your personal data transparently, securely, and in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. WHO IS RESPONSIBLE FOR YOUR DATA

Data Controller:

Rina Golan
The Other Cottage
Whiteleaf
Princes Risborough
HP27 0LL
Buckinghamshire
United Kingdom

Email: info@rinagolan.co

Throughout this Privacy Policy, “I”, “me”, “my” and “Rina Golan” refer to the data controller named above.

2. THE TYPES OF PERSONAL DATA I COLLECT

Depending on how you interact with my website or services, I may collect and process the following information:

Identity and contact data:
* Name
* Email address
* Telephone number
* Postal address

Booking and payment data:
* Retreat or programme bookings
* Payment confirmations
* Billing information
* Transaction history

Health and well-being information:
If you participate in retreats, mentoring, consultations, or wellness programmes, I may collect limited health or well-being information relevant to providing safe and appropriate support. This may include:
* Dietary requirements
* Allergies
* Lifestyle information
* Menopause or hormonal wellbeing information
* Emotional well-being information voluntarily provided by you

This information is treated as special category data under UK GDPR and is processed only with your explicit consent or where necessary to provide requested services.

Technical data:
* IP address
* Browser type and version
* Device type
* Time zone settings
* Website usage information
* Pages visited
* Cookies and analytics information

Marketing and communications data:
* Newsletter preferences
* Email engagement
* Communication history

3. HOW YOUR DATA IS COLLECTED

Your data may be collected when you:
* Visit my website
* Fill in forms
* Subscribe to newsletters
* Book retreats or programmes
* Contact me by email, phone, or social media
* Participate in consultations or mentoring
* Use cookies or analytics tools on the website

4. HOW I USE YOUR DATA

I use your information to:
* Respond to enquiries
* Provide retreats, mentoring, and wellbeing services
* Process bookings and payments
* Send newsletters and updates
* Improve website performance and user experience
* Maintain security and prevent fraud
* Comply with legal obligations

5. LEGAL BASIS FOR PROCESSING

Under UK GDPR, I rely on the following lawful bases:

Contract:
Processing is necessary to provide the requested services, bookings, or consultations.

Consent:
For newsletters, marketing communications, and certain health-related information.

Legitimate interests:
To improve services, maintain website security, and manage communications.

Legal obligations:
Where required for accounting, taxation, or legal compliance.

6. SPECIAL CATEGORY HEALTH DATA

As part of wellness, retreat, or mentoring services, you may voluntarily provide health-related or sensitive information.

This information is:
* Processed confidentially
* Accessed only where necessary
* Stored securely
* Never sold to third parties

The legal basis for processing this information is your explicit consent and/or provision of requested wellbeing services.

7. NEWSLETTERS AND EMAIL MARKETING

If you subscribe to my newsletter, your email address and related data will be used to send updates, retreat news, wellbeing content and offers.

Newsletters are sent through Intuit Mailchimp.

I use a double opt-in process for newsletter subscriptions.

You can unsubscribe at any time by:
* Clicking the unsubscribe link in emails
* Contacting info@rinagolan.co

8. COOKIES AND ANALYTICS

My website uses cookies and similar technologies to improve website functionality and understand visitor behaviour.

This may include:
* Essential cookies
* Analytics cookies
* Marketing cookies

Analytics tools may include:
* Google Analytics
* Meta/Facebook Pixel

Non-essential cookies are only activated after you provide consent through the website cookie banner.

You can manage or disable cookies through your browser settings.

9. THIRD-PARTY SERVICES

I may use trusted third-party providers including:
* Website hosting providers
* Payment processors such as Stripe
* Email marketing providers such as Mailchimp
* Analytics providers such as Google Analytics

These providers only process data as necessary to provide their services and are required to maintain appropriate security standards.

Payment processing is handled securely through Stripe. I do not store full payment card details on my servers.

10. INTERNATIONAL DATA TRANSFERS

Some service providers may process data outside the United Kingdom.

Where this occurs, appropriate safeguards are used, including:
* UK adequacy regulations
* International Data Transfer Agreements (IDTA)
* UK-approved contractual protections

11. DATA RETENTION

I retain personal data only for as long as necessary to:
* Provide services
* Meet legal and accounting obligations
* Resolve disputes
* Maintain business records

Where data is no longer required, it is securely deleted or anonymised.

12. YOUR RIGHTS

Under UK GDPR, you have the right to:
* Access your personal data
* Correct inaccurate data
* Request deletion of your data
* Restrict processing
* Object to processing
* Withdraw consent
* Request data portability
* Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact:
info@rinagolan.co

You also have the right to complain to the ICO:
Information Commissioner’s Office

13. DATA SECURITY

I take reasonable technical and organisational measures to protect your personal data against:
* Unauthorised access
* Loss
* Misuse
* Disclosure
* Alteration

My website uses secure encryption technologies including TLS/SSL.

14. SOCIAL MEDIA

I maintain social media accounts including:
* Instagram
* Facebook
* YouTube

If you interact with me through social media platforms, your information is also subject to the privacy policies of those platforms.

15. CHILDREN’S PRIVACY

My services are intended for adults and are not directed at children under 18 years old.

I do not knowingly collect personal information from children.

16. AUTOMATED DECISION-MAKING

I do not use automated decision-making or profiling that produces legal or similarly significant effects.

17. CHANGES TO THIS POLICY

This Privacy Policy may be updated from time to time to reflect:
* Legal changes
* Regulatory updates
* Service developments
* Website improvements

The latest version will always appear on this page with the updated revision date.

18. CONTACT

If you have questions about this Privacy Policy or how your data is handled, please contact:

Rina Golan
info@rinagolan.co
www.rinagolan.c