Privacy Policy

Privacy Policy  

Last Updated: March 2025

1. Introduction  

Welcome to imani (“we”, “us”, “our”). We are committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy explains how we collect, use, and safeguard your information when you interact with our website, purchase products, or use our services. By engaging with imani, you agree to the terms outlined below.  

2. Data We Collect  

We may collect and process the following personal data:  

  • Contact Details: Name, email address, phone number, and postal address (for product delivery).  

  • Payment Information: Bank transfer details, PayPal transactions, or other payment method details (processed securely; we do not store card data).  

  • Health Information: Medical conditions, allergies, or health goals (voluntarily disclosed during consultations to tailor services).  

  • Communications: Records of correspondence via email, phone, or website contact forms.  

3. How We Use Your Data  

We use your data for the following purposes:  

  • Product Orders: To process payments, arrange delivery, and manage returns.  

  • Service Bookings: To schedule appointments, provide tailored holistic treatments (e.g., acupuncture, EFT), and ensure client safety.  

  • Legal Compliance: To meet regulatory obligations.  

  • Communication: To respond to inquiries, send service updates, or share promotional offers (with your consent).  

4. Legal Basis for Processing  

We process your data under the following lawful bases:  

  • Contractual Necessity: To fulfill orders and deliver services you request.  

  • Legitimate Interests: For business operations, fraud prevention, and improving user experience.  

  • Explicit Consent: For sensitive health data (e.g., medical conditions) disclosed during consultations.  

  • Legal Obligations: To comply with UK laws (e.g., financial records).  

5. Data Retention  

We retain your data only as long as necessary:  

  • Transactional Data: Order and payment records are kept for 7 years for legal compliance.  

  • Health Information: Retained for the duration of your engagement with us and 2 years post-termination for safety/legal purposes.  

  • Marketing Data: Stored until you withdraw consent or opt out.  

6. Data Sharing  

We do not sell your data. We may share it with trusted third parties only when necessary:  

  • Service Providers: Payment processors (e.g., PayPal), delivery companies, or IT support (all GDPR-compliant).  

  • Legal Requirements: To comply with court orders, government requests, or fraud investigations.  

7. Your Rights  

Under UK GDPR, you have the right to:  

  • Access: Request a copy of your personal data.  

  • Rectification: Correct inaccurate or incomplete data.  

  • Erasure: Request deletion of your data (subject to legal limitations).  

  • Restrict Processing: Limit how we use your data.  

  • Object: Opt out of marketing or specific processing activities.  

  • Data Portability: Receive your data in a transferable format.  

To exercise these rights, contact us here. We will respond within 30 days.  

8. Data Security  

We implement robust measures to protect your data:  

  • Encryption: Secure transmission of sensitive information.  

  • Access Controls: Restricted access to data for authorized personnel only.  

  • Training: Staff trained in GDPR compliance and data protection best practices.  

In the event of a data breach, we will notify you and the ICO (Information Commissioner’s Office) within 72 hours if required by law.  

9. Cookies & Website Tracking  

Our website uses minimal cookies for essential functionality (e.g., contact forms). We do not use analytics or advertising cookies.  

10. Children’s Privacy  

Our services and products are intended for users aged 18+. We do not knowingly collect data from minors without parental consent.  

11. International Transfers  

Data is processed and stored within the UK/EEA. If third-party providers operate outside these regions, we ensure they meet UK GDPR standards.  

12. Updates to This Policy  

We may update this policy periodically. Changes will be posted on our website with a revised “Last Updated” date.  

13. Contact Us  

For questions, data requests, or complaints:  

  • Contact Form

  • ICO: You may report concerns to the Information Commissioner’s Office (ico.org.uk).  

Acknowledgement  

By using imani’s services or purchasing products, you acknowledge that you have read and understood this Privacy Policy.