Privacy Policy
Effective Date: 22 November 2025
Website: https://www.cosmicconnections.org/
Organisation: Cosmic Connections (“we”, “us”, “our”)
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, make a booking, contact us, or sign up for updates. We comply with UK GDPR, the Data Protection Act 2018, and all relevant UK data protection laws.
1. About Cosmic Connections
Cosmic Connections is run by Alana, a facilitator of natural healing methods and emotional wellbeing practices. Through lived experience of trauma and personal transformation, Alana supports clients on journeys of healing, self-rediscovery, and reconnection.
2. Data We Collect
2.1 Information You Provide
Contact Forms
When you contact us through the website, we collect:
Name
Email address
Message content
Booking Forms (via BookWhen)
When you book a session or class, we may collect:
Name
Email address
Phone number
Booking details (date, time, service selected)
Any optional information provided as part of the booking
Email Newsletter Signup
If you subscribe to updates, we collect:
Email address
Consent preferences
Payments
Payments are processed securely through BookWhen or its integrated payment providers. They may collect:
Payment card details
Billing information
Transaction data
We do not store or process card details directly.
2.2 Automatically Collected Data
Usage Data
When you visit the website, we may automatically collect:
IP address
Browser type and version
Pages visited
Date and time of visit
Time spent on each page
Device information
General geographic location
Cookies and Tracking Technologies
We use cookies to:
Operate the website
Analyse usage
Improve user experience
Provide marketing or personalisation
You can manage cookies using your browser or our Cookie Preferences banner.
Google Analytics
We use Google Analytics to understand how visitors use our site. Google may collect IP address, device identifiers and browsing behaviour. Google’s privacy policy: https://policies.google.com/privacy
We use Usercentrics to manage your cookie consent choices. Usercentrics records your consent preferences to ensure that cookies are only used according to your selections. This helps me comply with data protection laws like the UK GDPR.
3. How We Use Your Data
We use personal data to:
Provide and manage our services
Process bookings and payments
Respond to enquiries
Send newsletters and marketing emails (with consent)
Analyse and improve our website
Monitor performance and usage
Comply with legal obligations
4. Legal Bases for Processing
We rely on the following legal bases under UK GDPR:
Consent – for email marketing
Contract – for bookings, payments, and service delivery
Legitimate Interests – for website analytics and service improvements
Legal Obligation – where required by law
You can withdraw consent at any time.
5. Data Sharing and Third Parties
We may share data with trusted service providers that help us operate our services, including BookWhen (bookings and payments), email marketing platforms (e.g., Mailchimp), Google Analytics and website hosting providers. These providers must keep your data secure and use it only as instructed. We do not sell personal data.
6. International Transfers
Some providers, such as Google or Mailchimp, may process data outside the UK. When this occurs, we ensure safeguards such as UK-approved Standard Contractual Clauses, adequacy decisions, and secure data processing agreements.
7. Data Retention
We retain data only as long as necessary for the purposes collected:
Booking and contact information: up to 6 years
Email marketing data: until you unsubscribe
Analytics data: typically 26 months
After these periods, data is securely deleted.
8. Your Rights Under UK GDPR
You have the right to:
Access your data
Correct inaccurate data
Request deletion
Restrict processing
Object to processing
Withdraw consent
Request data portability
You may also raise concerns with the UK Information Commissioner’s Office (ICO).
9. Children’s Privacy
Our services are not intended for individuals under 18. We do not knowingly collect data from children. If you believe a child has provided personal information, please contact us.
10. Security of Your Data
We implement appropriate technical and organisational measures to protect your data. However, no online system is completely secure.
11. Links to Other Websites
Our website may contain links to external websites. We are not responsible for the privacy practices of other sites and encourage you to review their policies.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.
13. Contact Us
If you have questions or wish to exercise any of your data protection rights, you can contact us: