Privacy Policy

Last updated: January 2024

mystic-legacy ("we", "our", or "us") is committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Information We Collect

We may collect information about you in various ways, including:

• Personal Data: Name, email address, postal address, and other contact information you provide when enquiring about or booking our programmes.
• Child Information: Age and name of children enrolled in our programmes, as provided by parents or guardians.
• Usage Data: Information about how you use our website, including pages visited, time spent on pages, and referring websites.
• Device Information: Browser type, operating system, and device identifiers.

2. How We Use Your Information

We use the information we collect to:

• Process enrolments and bookings for our programmes
• Communicate with you about your bookings and our services
• Send you updates about new programmes and educational resources (with your consent)
• Improve our website and services
• Comply with legal obligations
• Protect the safety of children in our programmes

3. Legal Basis for Processing

We process your personal data based on:

• Contract: Processing necessary to provide our services to you
• Consent: Where you have given explicit consent for marketing communications
• Legitimate Interest: To improve our services and maintain security
• Legal Obligation: Where required by law, including safeguarding requirements

4. Data Sharing

We do not sell your personal information. We may share your data with:

• Service providers who assist in delivering our programmes
• Payment processors for secure transaction handling
• Legal authorities when required by law
• Professional advisers including lawyers and accountants

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, typically:

• Enrolment records: 7 years after the last programme attended
• Marketing preferences: Until you withdraw consent
• Website analytics: 26 months

6. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us at [email protected].

7. Children's Privacy

We take the privacy of children seriously. We only collect children's information through their parents or guardians. We do not knowingly collect personal information directly from children under 16 without parental consent.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

9. Cookies

Our website uses cookies to enhance your browsing experience. For more information, please see our Cookies Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

mystic-legacy
47 Division Street
Sheffield, S1 4GE
United Kingdom
Email: [email protected]

12. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit mystic-legacy.com for more information.