Privacy Policy
Last updated: March 2026
In One Heart ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our services.
1. Information We Collect
We may collect the following categories of personal information:
- Contact information: name, email address, phone number, and country of residence provided when you contact us, subscribe to our newsletter, or submit an application.
- Application information: intention, personal history, health information, dietary requirements, and emergency contact details provided when applying for a retreat or session.
- Payment information: billing details processed securely through Stripe. We do not store your card number or full payment details on our servers.
- Usage data: pages visited, time spent on pages, browser type, and referring URLs collected through analytics tools.
2. How We Use Your Information
We use the information we collect to:
- Process applications and bookings for retreats, workshops, and sessions
- Communicate with you about your booking, application status, and related matters
- Send newsletters and updates you have subscribed to
- Send order confirmations and transactional emails
- Ensure the safety and suitability of participants for our offerings
- Improve our website and services
- Comply with legal obligations
3. Health Information
Our retreat and session applications ask for health-related information to ensure participant safety and the integrity of our offerings. This information is treated with the utmost confidentiality. It is accessed only by our facilitation team and is not shared with third parties except where required by law or in a medical emergency.
4. Third-Party Services
We work with the following trusted third parties who may process your data:
- Stripe for payment processing. View their privacy policy.
- Supabase for secure database hosting. View their privacy policy.
- Resend for transactional email delivery. View their privacy policy.
- Google Analytics for anonymised website analytics (if enabled).
5. Cookies
Our website uses essential cookies required for the site to function (such as session management). We may also use analytics cookies to understand how visitors use our site. You can control cookies through your browser settings.
6. Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Application data is retained for up to 3 years. Newsletter subscriber data is retained until you unsubscribe.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your data
- Withdraw consent for marketing communications at any time
- Lodge a complaint with your local data protection authority
To exercise any of these rights, please contact us at hello@inoneheart.com.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Payment data is handled exclusively by Stripe using industry-standard encryption.
9. Children's Privacy
Our services are intended for individuals aged 18 and over. We do not knowingly collect personal information from minors. If you believe a minor has submitted information to us, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
11. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us at:
In One Heart
Email: hello@inoneheart.com